session-hold-booking-workflow
Validate session hold, booking, and conflict handling. Use when the user mentions session holds, scheduling conflicts, or booking flows.
Discover Blockchain skills, compare source repositories and read the instructions for each workflow.
Validate session hold, booking, and conflict handling. Use when the user mentions session holds, scheduling conflicts, or booking flows.
Implement or adjust authentication, OAuth flow, and multi-auth behavior. Use when editing auth interceptors, OAuth provider logic, or auth configuration.
Prevents RCE, SQL injection, and common vulnerabilities through validation and safe coding practices. Use when implementing or reviewing security-sensitive code involving user input, database queries, or comman...
Guidance for publishing npm packages with modern npm auth (trusted publishing/OIDC, granular tokens, 2FA) and release automation. Use when configuring GitHub Actions or other CI publish workflows, updating npm...
Implement JWT authentication with bcrypt password hashing, refresh tokens, account lockout, and password reset flow. Use when setting up authentication or login system.
Configure Supabase authentication with single callback URL pattern. Covers redirect URLs, auth flow types (recovery, signup, email_change), and the type parameter routing pattern. Triggers: supabase auth, auth...
Django rate limiting patterns using django-ratelimit with Redis backend for protecting views from abuse and spam. Trigger: When implementing rate limiting, spam protection, or throttling in Django views.
Perform comprehensive security audits of Java code against OWASP Top 10 and best practices. Use when auditing security, checking for vulnerabilities, analyzing SQL injection risks, preventing XSS attacks, revie...
Validate tenant isolation and RLS safety checks. Use when the user mentions tenant isolation, RLS validation, or multi-tenant access checks.
The 12 critical OpenAPI rules that cause immediate task failure if violated
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Build AWS SES email features with reCAPTCHA v3, Zod validation, XSS sanitisation, and rate limiting. Uses placeholders until env vars added to Vercel. Dual emails (owner + customer confirmation). Triggers: cont...
Validate RLS policies and role-based access. Use when the user mentions RLS testing, role access checks, or permissions validation.
Guides security validation checklist: Signal protocol security, encryption standards, authentication patterns, data protection. Use when validating security, reviewing security implementations, or ensuring secu...
Grants agents the instructions to run safety-checked penetration tests on cloud environments.
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Configures Cloudflare Access authentication with Google OAuth for protected services. Use when you need to set up authentication, configure Google OAuth, protect services with Cloudflare Access, enable remote a...
Lightweight validation for setup/configuration verification, workflow testing, and MCP connectivity checks. Applies to ~10 roadmap tasks requiring test execution, verification, or import/activation validation.
Security standards for credential handling and authentication
Validate profile files against the schema and OpenAPI operations. Use when creating or changing profiles or when validation errors appear.
This skill should be used when the user asks to 'configure Keycloak', 'set up ABAC', 'create Keycloak realm', 'integrate Azure AD with Keycloak', 'implement authorization services', 'configure OIDC client', 'cr...
Managing OpenCode sessions and context
Monitors and sanitizes all inputs to ensure zero storage of PHI, PII, or proprietary study secrets.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.