Discover devops security skills, compare source repositories and read the instructions for each workflow.
Design and implement secure admin APIs in Next.js 16 with hardened security, RBAC, CSRF protection, tenant isolation, and audit logging. Use when creating new admin API routes, implementing security controls, o...
Thorough, adversarial security review of API endpoints, UI flows that call those endpoints, and any database-interacting code. Use when the user asks for a security review, permission/authorization audit, red-t...
Performs security audits checking for exposed secrets, weak authentication, SQL injection, XSS vulnerabilities, and validates security best practices
Execute review crypto wallet security including private key management and transaction signing. Use when auditing wallet security practices. Trigger with phrases like "audit wallet", "check security", or "verif...
Generate salted hash URLs with QR codes displayed in terminal. Use when user wants to create a unique URL with a random salt appended to an identifier, or needs a QR code linking to a user profile page. Trigger...
Generate secure random passwords or memorable passphrases. Use when user needs a password, passphrase, secret key, or asks for help creating secure credentials.
Install, configure, and manage the Claude Code Damage Control security hooks system. Use when user mentions damage control, security hooks, protected paths, blocked commands, install security, or modify protect...
Documentation Guardian. Detects stale docs and enforces update rules.
Issues a proxy audit verdict for a session.
Escalates a session issue to a human reviewer.
Issues a proxy audit verdict for a session.
Escalates a session issue to a human reviewer.
Checks session compliance against a Rule of Constraints policy.
Checks session compliance against a Rule of Constraints policy.
Security audit patterns and OWASP Top 10 vulnerability detection. Auto-triggers when reviewing code for security, handling authentication, or processing user input.
Implement authentication with Supabase, OAuth providers, and session management. Use when adding login, OAuth flows, or protecting routes.
React Server Components (RSC) の利用方針とセキュリティ基準に基づき、データの安全性と疎結合性を監査します。
Atomic Validation Protocol: Unified validator for Chroma Check and Librarian Audit.
Identify dangerous-but-tempting API patterns in React/Next.js/Supabase. Finds "footguns" - APIs that look safe but fail silently or have dangerous defaults. Inspired by Trail of Bits methodology.
Verify that security fixes actually resolve the vulnerability without introducing new issues. Reviews fix commits against original findings. Inspired by Trail of Bits methodology.
Complete security audits with 120+ checks for web applications. Covers OWASP Top 10 2025, Supabase RLS bypass attacks (40+ vectors), API enumeration, Realtime channel leaks, payment security, timing attacks, an...
Expert in Security, Audits, and Vulnerability Analysis. Use when reviewing code or designing secure flows.
Use this agent when performing security audits, vulnerability assessments, or security reviews of code. Triggers on requests like "security review", "check for vulnerabilities", "OWASP compliance check".
Test authenticated API routes in ActionPhase using JWT Bearer token authentication. Use when testing API endpoints, validating route functionality, debugging authentication issues, or verifying request/response...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.