GitHub
vercel-security-access
Vercel security and access controls including RBAC, SSO, deployment protection, firewall, bot defense, audit logs, and 2FA. Use when securing Vercel projects or managing access.
☆ 12Voir le skill
Skills IA tools security
Découvrez les skills tools security, comparez leurs dépôts et consultez leurs instructions.
Catégories: tools security
tools security Effacer les filtres
Explorer
GitHub
better-auth-integrations
Better Auth framework integrations for TypeScript. Use when wiring route handlers in Next.js, SvelteKit, Remix, Express, Hono, or other web frameworks.
☆ 12Voir le skill
GitHub
better-auth-authentication
Better Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and verification flows.
☆ 12Voir le skill
GitHub
security-scanning
CI security scanning: secrets, deps, SAST, triage, expiring exceptions
☆ 12Voir le skill
GitHub
better-auth-core
Better Auth core setup for TypeScript apps. Use when configuring the Better Auth instance, wiring server handlers and client instances, working with sessions, or calling server-side auth APIs.
☆ 12Voir le skill
GitHub
api-security-review
API security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and input validation.
☆ 12Voir le skill
GitHub
better-auth-plugins
Better Auth plugin system for TypeScript. Use when adding advanced auth features (2FA, magic link, passkey, username, JWT, organizations) via server and client plugins.
☆ 12Voir le skill
GitHub
security-review-audit
Full codebase security audit with OWASP Top 10 guidance, language-specific patterns, checklists, and fix examples. Use for comprehensive audits split by module/area.
☆ 12Voir le skill
GitHub
authentication-setup
Design and implement authentication and authorization systems. Use when setting up user login, JWT tokens, OAuth, session management, or role-based access control. Handles password security, token management, S...
☆ 12Voir le skill
GitHub
security-best-practices
Implement security best practices for web applications and infrastructure. Use when securing APIs, preventing common vulnerabilities, or implementing security policies. Handles HTTPS, CORS, XSS, SQL Injection,...
☆ 12Voir le skill
GitHub
opencode-authentication
Opencode OAuth authentication flows for Claude Code, Gemini/Antigravity, and Codex. Use when setting up multi-provider authentication, configuring Opencode with various AI services, or troubleshooting auth issu...
☆ 12Voir le skill
GitHub
security-reporter
Use when generating comprehensive security audit reports, analyzing security scan results, calculating security posture, or creating OWASP Top 10 compliance assessments. Invoked for security reporting, vulnerab...
☆ 12Voir le skill
GitHub
security-analyst
Security analyst persona with deep OWASP expertise, vulnerability classification, risk assessment, and compliance mapping
☆ 12Voir le skill
GitHub
constitution-checker
Validates constitution status before executing /flowspec commands. Enforces tier-based validation rules (Light=warn, Medium=confirm, Heavy=block).
☆ 12Voir le skill
GitHub
security-reviewer
Use when reviewing code for security vulnerabilities, conducting threat modeling, ensuring SLSA compliance, or performing security assessments. Invoked for security analysis, vulnerability detection, and compli...
☆ 12Voir le skill
GitHub
authorization-security
Authorization security standards covering RBAC, ABAC, policy enforcement, OAuth2 scopes, resource-based access control, and NIST 800-53 compliance (AC-3, AC-4, AC-6) for production systems
☆ 12Voir le skill
GitHub
api-security
1. Broken Object Level Authorization (BOLA) - API fails to validate user access to objects 2. Broken Authentication - Weak or missing authentication mechanisms 3. Broken Object Property Level Authorization - Mi...
☆ 12Voir le skill
GitHub
authentication-security
Authentication security standards covering OAuth2 flows (authorization code, PKCE), JWT best practices (RS256, expiration), MFA (TOTP, WebAuthn), session management, and NIST 800-63B compliance for production s...
☆ 12Voir le skill
GitHub
secrets-management
Secrets management standards for API keys, passwords, certificates, and sensitive data. Covers HashiCorp Vault, environment variables, rotation policies, and detection tools with NIST 800-53r5 SC-12 compliance.
☆ 12Voir le skill
GitHub
input-validation
Input-Validation standards for input validation in Security environments.
☆ 12Voir le skill
GitHub
threat-modeling
Use when implementing auth, file uploads, payments, or external APIs. Applies STRIDE framework systematically. Triggers: "authentication", "file upload", "payment", "multi-tenant", "external API". If thinking "...
☆ 12Voir le skill
GitHub
security-compliance-audit
Use for formal compliance audits requiring documentation (SOC2, PCI-DSS, HIPAA, GDPR, ISO 27001). Enforces TodoWrite with 20+ items. Triggers: "compliance audit", "regulatory assessment", "auditor documentation...
☆ 12Voir le skill
GitHub
express-api-developer
Express.js backend API development for Vigil Guard v2.0.0. Use for endpoint creation, JWT authentication, RBAC, ClickHouse queries with 3-branch columns, rate limiting, CORS management, branch service proxy end...
☆ 12Voir le skill
GitHub
presidio-pii-specialist
Microsoft Presidio PII detection API for Vigil Guard v2.0.0. Use for dual-language PII (Polish + English), spaCy models, entity deduplication, custom recognizers (PESEL, NIP, REGON), integration with 3-branch d...
☆ 12Voir le skill
Le classement utilise les étoiles du dépôt GitHub indexé. Plusieurs skills peuvent partager ce nombre : ce n’est ni un nombre d’installations ni une note de qualité.