GitHub
clerk-auth-expert
Expert in Clerk authentication for React Native/Expo apps. Handles user authentication, session management, protected routes, and integration with backend services.
☆ 1View skill
devops security AI Skills
Discover devops security skills, compare source repositories and read the instructions for each workflow.
Categories: devops security
devops security Clear filters
Browse skills
GitHub
secure-nextjs-api-routes
A comprehensive security middleware system for Next.js 13+ App Router API routes that provides authentication, rate limiting, CSRF protection, audit logging, and security headers in a composable, production-rea...
☆ 1View skill
GitHub
wp-security
WordPress security best practices and vulnerability prevention for plugin development. Use when reviewing code for security issues or implementing security-sensitive features.
☆ 1View skill
GitHub
security-health-inline
Inline orchestration workflow for security vulnerability detection and remediation with Beads integration. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-f...
☆ 1View skill
GitHub
reviewing-authentication-and-authorization-security
Use when reviewing authentication or authorization code. Provides comprehensive security guidance on JWT validation, token exchange, OAuth 2.0/2.1 compliance, PKCE, Resource Indicators, MCP authorization, sessi...
☆ 1View skill
GitHub
curriculum-validate-cc
Validate IMS Common Cartridge 1.3 packages against spec, check manifest schema, verify file references, validate QTI assessments, and ensure LMS compatibility. Use when validating CC packages before delivery. A...
☆ 1View skill
GitHub
learning-badge-system
badge-system for credentials, recognition, and competency validation.
☆ 1View skill
GitHub
ai-security
Automatically applies when securing AI/LLM applications. Ensures prompt injection detection, PII redaction for AI contexts, output filtering, content moderation, and secure prompt handling.
☆ 1View skill
GitHub
agent-ops-api-review
Platform/Language agnostic API delivery and correctness auditor. Use when project contains API endpoints to verify contract alignment, endpoint behavior, and test coverage.
☆ 1View skill
GitHub
api-fuzzing-for-bug-bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
☆ 1View skill
GitHub
broken-authentication-testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
☆ 1View skill
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
☆ 1View skill
GitHub
widget-security
Security patterns for loading and running third-party widgets in the 3SC host. Covers sandboxing, permissions, code signing, and trust levels.
☆ 1View skill
GitHub
self-improvement
API 호출 후 결과 검증 및 오류 자동 수정 패턴. 검색 결과 품질 개선, 파라미터 자동 조정, 자동 재시도 구현 시 참조.
☆ 1View skill
GitHub
auth
Better Auth authentication. Use for auth, login, logout, session, user, signup, register, protect, middleware, password, oauth, social
☆ 1View skill
GitHub
the-auditor
Audits code and plans against the 9 Articles of Development and Pre-Implementation Gates. Use this skill before submitting code or when the user asks for a review.
☆ 1View skill
GitHub
mr-robot
Security and data integrity checks for org run mr robot leak and org run mr robot db requests. Use when asked to audit PII exposure, auth gaps, or database issues.
☆ 1View skill
GitHub
prowler-api
Prowler API patterns: JSON:API, RLS, RBAC, providers, Celery tasks. Trigger: When working in api/ on models/serializers/viewsets/filters/tasks involving tenant isolation (RLS), RBAC, JSON:API, or provider lifec...
☆ 1View skill
GitHub
architecture-validation
Detect and validate client-authoritative vs server-authoritative architecture gaps
☆ 1View skill
GitHub
prowler-test-api
Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC. Trigger: When writing tests for api/ (JSON:API requests/assertions, cross-tenant isolation, RBAC, Celery tasks, viewsets/serializer...
☆ 1View skill
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 1View skill
GitHub
api-auth-guards
Generate authentication and authorization guards (JWT, API key, roles, permissions) with tenant context validation. Use when protecting API endpoints or implementing RBAC.
☆ 1View skill
GitHub
validate-urls
This skill should be used when the user asks to "validate external URLs", "check for link rot", "screenshot URLs", "archive external links", or wants to verify and document external web resources (http/https) r...
☆ 1View skill
GitHub
better-auth
Add authentication with Better Auth (TypeScript). Use for email/password, OAuth providers (Google, GitHub), 2FA/MFA, passkeys/WebAuthn, sessions, RBAC, rate limiting.
☆ 1View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.