Discover blockchain security skills, compare source repositories and read the instructions for each workflow.
Comprehensive security implementation covering authentication, authorization, input validation, vulnerability detection, compliance, and security standards (OWASP, ISO 27001, SOC2, CWE). Use when securing appli...
Implement authentication, authorization, input validation, and security best practices. Use when securing API endpoints and data.
Implement authentication, authorization, input validation, and security best practices. Use when securing API endpoints and data.
金卡身份中心开发者指引
Automated post-migration validation for iam-migration (ETBC to IAM). Use when designing or executing verification that legacy ETBC users can log in to the portal, permissions are consistent, and app/menu mappin...
HTTP client for Clojure and Babashka built on java.net.http. Use when making HTTP requests, working with REST APIs, downloading files, or needing WebSocket support in Babashka or Clojure.
Modern HTTP client for Clojure wrapping JDK 11+ java.net.http. Use when working with HTTP requests, REST APIs, async HTTP calls, WebSockets, or needing HTTP/2 support.
Framework-agnostic frontend security guide based on OWASP. Use when implementing security in web applications, reviewing frontend code for vulnerabilities, or working with client-side authentication, XSS preven...
Expert skill for running security test suites including DeepTeam, OWASP tests, and adversarial prompt testing. Use when validating AI safety measures or performing security audits.
Comprehensive checklist for releasing OSS projects. Covers security (CSP, PII, secrets), legal compliance (licenses, API terms, trademarks), privacy (GDPR, telemetry opt-out), and documentation. Use when prepar...
セキュリティ・エラーハンドリングレビュー - OWASP Top 10、エラー処理、ログ管理を統合評価
Fix session protocol validation failures in GitHub Actions. Use when a PR fails with "Session protocol validation failed", "MUST requirement(s) not met", "NON_COMPLIANT" verdict, or "Aggregate Results" job fail...
Reviews code changes against Zenable conformance requirements using hybrid LLM-as-judge and deterministic validation. Automatically invoked when making code changes or at development milestones. Use for securit...
Audit and implement security best practices for GitHub repositories. USE THIS SKILL when user says "security audit", "check security", "add gitleaks", "secret scanning", "dependency audit", or needs security ha...
This skill should be used when the user asks about "connector authentication", "oauth workato", "api key auth", "jwt authentication", "aws auth connector", "basic auth connector", "multi_auth", "connection bloc...
This skill provides guidance for implementing secure authentication using Better Auth for Next.js frontend and JWT verification for FastAPI backend.
Release Wolf - Pre-deployment QA gatekeeper. Run before any production deploy. Checks for exposed secrets, broken links, Lighthouse performance scores, and visual regressions. Invoke with /prodcheck or when use...
Run all HAIOS audit checks to find drift, gaps, and stale items. Use before starting a new session or after completing a milestone.
Handling Authentication, Role-Based Access Control (RBAC), and Middleware.
Automated privacy review for git repositories. Scans for sensitive data exposure including API keys, passwords, database credentials, and tokens. Use before pushing to public repositories or sharing code. Trigg...
Audit code for security vulnerabilities using OWASP Top 10 guidelines. Use for security audits, pre-deployment checks, authentication reviews, or when checking for XSS, SQL injection, CSRF, or authorization iss...
Run security scan on skills or directories to detect API keys, tokens, passwords, personal paths, and other sensitive data. Use before pushing skills or committing code.
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
コマンド実行の安全ポリシーを適用し、破壊的・外部影響のある操作は事前確認する
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.