GitHub
reviewing-security
OWASP Top 10-based security review and vulnerability detection. Triggers: security, OWASP, XSS, SQL injection, セキュリティ, 脆弱性, vulnerability.
☆ 3View skill
devops security AI Skills
Discover devops security skills, compare source repositories and read the instructions for each workflow.
Categories: devops security
devops security Clear filters
Browse skills
GitHub
probe
OWASP ZAP/Burp Suite連携、ペネトレーションテスト計画、DAST実行、脆弱性スキャン。動的セキュリティテスト、侵入テスト、実行時脆弱性検証が必要な時に使用。Sentinelの静的分析を補完。
☆ 3View skill
GitHub
sentinel
ハードコード秘密鍵検出、SQLインジェクション対策、入力検証追加、セキュリティヘッダー設定。セキュリティ監査、脆弱性修正、安全性向上が必要な時に使用。
☆ 3View skill
GitHub
api-integration
Guide for integrating external APIs securely and correctly
☆ 3View skill
GitHub
github-oauth-skill
GitHub integration with OAuth2 Device Flow authentication for repositories, issues, pull requests, and more
☆ 3View skill
GitHub
pop-assessment-security
Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists
☆ 3View skill
GitHub
data-validation
Security pattern for input validation and sanitization. Use when implementing input handling, preventing injection attacks (SQL, XSS, command), ensuring data integrity, or processing data from untrusted sources...
☆ 3View skill
GitHub
verifiable-token-based-authentication
Security pattern for self-contained token authentication (e.g., JWT). Use when implementing stateless authentication, designing tokens with embedded claims, or building systems where tokens contain principal in...
☆ 3View skill
GitHub
limit-request-rate
Security pattern for implementing rate limiting and throttling. Use when protecting against brute-force attacks, DoS/DDoS mitigation, preventing resource exhaustion, or limiting API abuse. Addresses "Entity abs...
☆ 3View skill
GitHub
transparent-encrypted-storage
Security pattern for full-disk or database-level encryption at rest. Use when implementing Transparent Data Encryption (TDE), full-disk encryption, or when storage infrastructure should handle encryption withou...
☆ 3View skill
GitHub
selective-encrypted-storage
Security pattern for field-level encryption at rest. Use when encrypting specific sensitive data fields before storage, implementing application-level encryption for databases, or when only certain data element...
☆ 3View skill
GitHub
opaque-token-based-authentication
Security pattern for server-side token authentication (e.g., session IDs). Use when implementing session management, designing stateful authentication where server maintains token-to-principal mapping, or build...
☆ 3View skill
GitHub
encryption
Security pattern for implementing encryption and decryption operations. Use when encrypting data for confidentiality, selecting encryption algorithms (AES, RSA), configuring cipher modes (GCM, CBC), choosing ke...
☆ 3View skill
GitHub
cryptographic-key-management
Security pattern for managing cryptographic keys throughout their lifecycle. Use when integrating cryptography requiring key generation, storage, distribution, or usage. Provides guidance on key confidentiality...
☆ 3View skill
GitHub
message-authentication-code-mac
Security pattern for implementing Message Authentication Codes (MACs) to ensure data integrity and origin authentication. Use when implementing HMAC, CMAC, or other MAC algorithms, verifying message integrity,...
☆ 3View skill
GitHub
self-managed-cryptography
Security pattern for systems that manage cryptographic keys themselves rather than delegating to an external service. Use when the application must store, retrieve, and manage cryptographic keys directly. Imple...
☆ 3View skill
GitHub
selective-encrypted-transmission
Security pattern for encrypting specific data before transmission. Use when only certain data elements need encryption, implementing field-level encryption for transit, or when entities must actively manage enc...
☆ 3View skill
GitHub
authentication-security-pattern
Security pattern for implementing authentication in software systems. Use when designing or reviewing authentication mechanisms, implementing login systems, verifying user identity, protecting system access, or...
☆ 3View skill
GitHub
session-based-access-control
Security pattern combining session authentication with authorization. Use when implementing web application security requiring both user authentication via session IDs and authorization checks for resource acce...
☆ 3View skill
GitHub
password-based-authentication
Security pattern for implementing password-based authentication. Use when designing login systems with username/password, implementing password storage, hashing, salting, peppering, password policies, or passwo...
☆ 3View skill
GitHub
output-filter
Security pattern for filtering data before sending to external entities. Use when preventing excessive data exposure, implementing data minimization, protecting sensitive information in API responses, or ensuri...
☆ 3View skill
GitHub
digital-signature
Security pattern for implementing digital signatures. Use when implementing document signing, code signing, certificate signing, non-repudiation, or verifying authenticity and integrity of messages using asymme...
☆ 3View skill
GitHub
encrypted-tunnel
Security pattern for channel-level encryption (TLS/SSH). Use when implementing HTTPS, securing all communication between endpoints, setting up TLS connections, or when infrastructure should handle encryption tr...
☆ 3View skill
GitHub
authorisation
Security pattern for implementing access control and authorization. Use when designing permission systems, implementing RBAC/ABAC, preventing unauthorized access, addressing privilege escalation, or ensuring us...
☆ 3View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.