input-validation
Use when accepting user input. Use when handling request data. Use when trusting external data without validation.
Discover devops security skills, compare source repositories and read the instructions for each workflow.
Use when accepting user input. Use when handling request data. Use when trusting external data without validation.
Автоматизация JWT аутентификации, Telegram OAuth и security middleware
Explains how Claude Code works in containers with zero credentials via the clauderon proxy. Use when testing Claude in containers, debugging authentication issues, or understanding the zero-trust proxy architec...
Guide for creating new external service connectors in DEVS. Use this when asked to add a new OAuth app connector, API connector, or integration with external services like Slack, Trello, Linear, Asana, Dropbox,...
Rules for evaluating, classifying, and deduplicating AI tool permissions
Security analysis, vulnerability assessment, and security code reviews
Scan code and infrastructure for security vulnerabilities and compliance issues
WordPress security audit and vulnerability analysis. Use when reviewing WordPress code for security issues, auditing themes/plugins for vulnerabilities, checking authentication/authorization, analyzing input va...
Web application security best practices including OWASP Top 10, authentication, authorization, input validation, cryptography, and secure coding patterns. Use when implementing security features, reviewing code...
Maps security requirements to implementation. Coordinates compliance against FIPS 140-3, OCF, CommonCriteria, and Tizen specification.
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating w...
Web application security testing with Burp Suite.
Validates tizen-manifest.xml privilege declarations. Checks privilege correctness, required privilege levels, and manifest conformance.
Secure provisioning for TizenRT/ARTIK IoT devices. Coordinates certificate installation, key management, and network onboarding.
Analyzes SMACK policy files for correctness, label conflicts, and access control issues. Verifies mandatory access control rules.
macOS MDM with auth manifolds as cobordisms for credential derivation
Validates Cynara privilege access control policies. Checks policy syntax, logical consistency, and permission accuracy.
WEV Verification Skill
Queries Cynara database and validates runtime privilege policies. Coordinates access control decisions across system services.
Comprehensive guide for implementing Fullstory's User Identification API (setIdentity) across web applications. Teaches proper uid handling, property passing, re-identification behavior, and session management....
Comprehensive guide for implementing Fullstory's User Anonymization API (setIdentity with anonymous:true) for web applications. Teaches proper logout handling, session management, privacy compliance, and user s...
Prevents fabricated URLs. Only use links that appear in the sources pool or are provided by the user.
OAuth 2.0認可フローの実装パターンとセキュリティベストプラクティス。 Authorization Code Flow、PKCE、Refresh Token Flowの正確な実装を提供。 Web/SPA/モバイルアプリでの安全な認可フロー実装を支援。 Anchors: • OAuth...
暗号化・ハッシュ・CSPRNG・鍵管理の実装を安全に進めるためのスキル。 要件整理から設計、実装、監査までの一連フローを提供する。 Anchors: • Applied Cryptography / 適用: アルゴリズム選定と強度判断 / 目的: 標準準拠の...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.