GitHub
security-audit
Perform automated security analysis on code changes to identify common vulnerabilities including SQL injection, path traversal, hardcoded secrets, XSS, and insecure API usage. Reviews Python code for OWASP Top...
Skills IA documentation security
Découvrez les skills documentation security, comparez leurs dépôts et consultez leurs instructions.
Catégories: documentation security
documentation security Effacer les filtres
Explorer
GitHub
microservice-auth
IOE-DREAM微服务认证架构规范。涵盖Gateway集中认证(JWT验证、Token黑名单)、业务层授权(@PermissionCheck注解)、Spring Security依赖管理(业务服务排除)、Gateway身份头转发(X-User-Id等HTTP头)、RBAC规则引擎。使用时机:实现...
GitHub
nrpg-workflow
Use when working on NRPG Platform tasks to follow repo conventions (NextAuth cookie sessions, tenant safety, and contractor privacy) and to run the correct checks.
GitHub
eridu-authentication-authorization-frontend
Provides frontend-specific authentication and authorization implementation patterns for React applications. This skill should be used when implementing login flows, protecting routes, storing tokens securely, m...
GitHub
eridu-authentication-authorization-backend
Provides backend-specific authentication and authorization implementation patterns for NestJS/TypeScript servers. This skill should be used when implementing JWT validation, role-based access control, API key g...
GitHub
eridu-authentication-authorization
Provides general authentication and authorization principles for designing secure systems. This skill should be used when implementing login flows, protecting endpoints, enforcing permissions, or designing API...
GitHub
middleware-patterns
Next.js middleware patterns for protected routes, auth redirects, and URL handling. Use when working with middleware.ts, protected routes, or auth redirects. Keywords: middleware, protected routes, redirect, au...
GitHub
auth-patterns
Supabase authentication patterns including getUser vs getSession, deadlock avoidance, session handling, and bypass patterns. Use when working with auth, sessions, cookies, or encountering auth hangs/timeouts. K...
GitHub
adynato-web-api
Web API development conventions for Adynato projects. Covers API routes, middleware, authentication, error handling, validation, and response formats for Next.js and Node.js backends. Use when building or modif...
GitHub
security-baseline
Audit and implement security best practices for GitHub repositories. USE THIS SKILL when user says "security audit", "check security", "add gitleaks", "secret scanning", "dependency audit", or needs security ha...
GitHub
verification-mode
Verification mode that stops and analyzes on failures, workarounds, or resolution issues
GitHub
permission-web-access
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
GitHub
tools-permission-sync
Synchronize marketplace permissions - generate wildcards, manage executor permissions, and migrate to executor pattern.
GitHub
permission-doctor
Diagnose permission issues across settings files (read-only analysis)
GitHub
security
Reviews code for security vulnerabilities, identifies security issues, suggests improvements
GitHub
security
Shared security framework across all phases. Security principles, requirements, architecture, testing, operations, and compliance integration. Warm, story-driven Expert Mentor style for 2026.
GitHub
security-audit
Perform security audits detecting OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations. Use when auditing applications for security vulnerabilities.
GitHub
wa-security-review
Conduct a focused security audit based on the Well-Architected Framework Security pillar. Use when user says "security review", "wa security", or "security audit". Analyzes authentication, authorization, data p...
GitHub
context-security-resolver
Authentication, authorization, Clerk integration, RLS policies, and security patterns. Use when working with security-resolver code, files, or integration. Invoke when navigating security-resolver codebase, sea...
GitHub
compare-api-versions
Compare OpenAPI versions for Terraform provider updates
GitHub
databricks-apps-cookie-auth
Guide for authenticating with Databricks Apps using cookie-based auth when OAuth/PAT tokens don't work. Use when connecting to Databricks Apps with User Authorization enabled.
GitHub
web-fuzzing
Web application security testing using fuzzing techniques to discover vulnerabilities, injection points, and edge cases
GitHub
remote-bridge
Remote 요청 브릿지 스킬. Use when (1) 원격 상태 확인, (2) 대기 중인 요청 조회, (3) 수동 권한 승인/거부.
GitHub
astro-blog-validate
Phase 5 - Validation checks before publishing
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.