Discover blockchain security skills, compare source repositories and read the instructions for each workflow.
Complete 1Password CLI (op) for managing secrets, credentials, and secure storage. Use when working with: (1) Retrieving passwords, API keys, and secrets from vaults, (2) Managing items, documents, and secure n...
Retrieve staging credentials/JWT token for the Aircall dashboard
Open a headless browser authenticated with Aircall staging credentials for localhost development
セキュリティ監査と脆弱性対策を支援します。OWASP Top 10に基づく包括的な脆弱性チェック、コード分析、リスク評価を提供します。セキュリティ脆弱性の特定、コンプライアンス確認、セキュアコーディング実装が必要な場合に使...
バックエンド API 実装、認証・認可、キャッシング戦略を支援します。セキュアな実装、パフォーマンス最適化、テスト戦略を提供します。API実装、バックエンドサービスの開発が必要な場合に使用してください。
Policy as Code with OPA, Kyverno, and Checkov. Use when implementing governance, compliance automation, or security policies for infrastructure and Kubernetes.
セキュリティ脆弱性を自動検出する。認証情報のハードコード、コマンドインジェクション、危険なシェル構文などをチェック。
Authentication with Laravel Sanctum and permission-based authorization. Use when implementing login/logout, protecting pages with permissions, checking permissions in components, or understanding the auth flow.
Implement secure authentication systems including signup, signin, password hashing, JWT tokens, and Better Auth integration.
Dependency security scanning. Use when auditing npm packages for vulnerabilities.
Security scanning tools (gosec, govulncheck). Use when running security analysis.
Authorization patterns including RBAC and ABAC. Use when implementing access control.
expo-secure-store patterns for sensitive data. Use when storing tokens and credentials.
Security best practices for Go applications. Use when writing security-sensitive code.
Authentication patterns including JWT, sessions, and OAuth. Use when implementing user authentication.
Security scanning with dependency audits, secret detection, static analysis, and vulnerability management. Use when checking for vulnerabilities, scanning dependencies, or enforcing security gates.
Security review for blockchain and cryptographic code. Use when reviewing PRs, auditing code, checking for vulnerabilities, or when security is mentioned.
Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.
This skill should be used when agents need to log into websites, retrieve passwords, or access credentials. CRITICAL - always use find_credential with the website URL, never guess item names.
Production-grade security testing skill with OWASP Top 10, vulnerability scanning, penetration testing guidance, and compliance validation
Guide OAK RFC validation with quality assessment frameworks, review rubrics, and structured feedback patterns.
Database security, access control, and data protection
Secure Spring Boot applications - authentication, authorization, OAuth2, JWT, CORS/CSRF protection
PHP API development mastery - REST, GraphQL, JWT/OAuth, OpenAPI documentation
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.