GitHub
openwebf-security
DEPRECATED umbrella Skill (backward compatibility). Use only for cross-cutting security reviews spanning remote content + XSS/sanitization + store compliance. Prefer focused openwebf-security-* Skills.
☆ 0View skill
devops security AI Skills
Discover devops security skills, compare source repositories and read the instructions for each workflow.
Categories: devops security
devops security Clear filters
Browse skills
GitHub
openwebf-security-xss-sanitization
Review and mitigate XSS risks in WebF apps (sanitize HTML, validate input, avoid unsafe string rendering). Use when the user mentions XSS, sanitize HTML, innerHTML-like rendering, user-generated HTML, or “untru...
☆ 0View skill
GitHub
testing-api-authentication
Test FastAPI endpoints with Clerk JWT authentication while avoiding common environment, token expiry, and claim validation pitfalls. Use when tester-agent needs to validate API authentication, run end-to-end te...
☆ 0View skill
GitHub
clerk-token-ops
Automates Clerk JWT token generation, validation, and export for FastAPI integration tests. Use when an agent must refresh tokens, verify JWT templates, or unblock authentication workflows without breaking envi...
☆ 0View skill
GitHub
auth-schema-generator
Generate Better Auth user schema configuration with custom additional fields for user profiles. Use when implementing authentication, user profiles, or extending user data models with Better Auth. Automatically...
☆ 0View skill
GitHub
weavr-ui
Use when implementing Weavr UI components for secure payment flows, authentication (password/passcode), KYC/KYB verification, or card display
☆ 0View skill
GitHub
secrets-management
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
☆ 0View skill
GitHub
pact-security-patterns
CROSS-CUTTING: Security patterns and best practices for ALL PACT phases. Provides OWASP Top 10 guidance, authentication/authorization patterns, input validation, secure coding practices, secrets management, an...
☆ 0View skill
GitHub
better-auth-configuration
Creates Better Auth configuration for frontend and backend: handlers, providers, middleware, session/token options. Uses Context7 MCP to retrieve Better Auth docs.
☆ 0View skill
GitHub
helmet-config-generator
Generate Helmet.js security middleware configuration for Express applications. Triggers on "create helmet config", "generate helmet configuration", "express security headers", "helmet setup".
☆ 0View skill
GitHub
oauth-config-generator
Generate OAuth 2.0 configuration for social login providers (Google, GitHub, etc.). Triggers on "create oauth config", "generate oauth setup", "social login config", "oauth2 integration".
☆ 0View skill
GitHub
csp-header-generator
Generate Content Security Policy (CSP) header configurations for web security. Triggers on "create csp header", "generate content security policy", "csp config", "security headers".
☆ 0View skill
GitHub
jwt-config-generator
Generate JWT authentication configuration and utilities for API security. Triggers on "create jwt config", "generate jwt authentication", "jwt setup", "token auth config".
☆ 0View skill
GitHub
auth-guidelines
Advanced Security, IAM, OAuth2, and OWASP Standards
☆ 0View skill
GitHub
dev-docs-workflow
Dev docs system for maintaining context across sessions
☆ 0View skill
GitHub
nodes-credentials-patterns
Implement n8n credential types including API key, OAuth2, and header-based authentication patterns. Use this skill when creating *.credentials.ts files, implementing ICredentialType interfaces, configuring OAut...
☆ 0View skill
GitHub
global-validation
Apply input validation best practices including server-side validation, early failure, specific error messages, and input sanitization. Use this skill when validating user input in n8n nodes, implementing param...
☆ 0View skill
GitHub
philsquare-permissions
This skill should be used when the user asks to "add permissions to a policy", "create a policy with roles", "set up role permissions", "configure rolePermissions", "use BasePolicy", or when working with Larave...
☆ 0View skill
GitHub
moai-platform-baas
Comprehensive unified BaaS (Backend-as-a-Service) integration hub for 9 major providers: Auth0, Clerk, Firebase Auth, Supabase, Neon, Convex, Firebase Firestore, Vercel, and Railway with AI-powered provider sel...
☆ 0View skill
GitHub
authentication
Authentication and authorization including JWT, OAuth2, sessions, and RBAC. Activate for login, auth flows, security, access control, and identity management.
☆ 0View skill
GitHub
security-checklist
Application security best practices and vulnerability prevention. Use when reviewing code for security issues, implementing authentication, or discussing OWASP vulnerabilities. Triggers on mentions of security,...
☆ 0View skill
GitHub
rbac-validator
Validates role-based access control (RBAC) implementation for four-tier permissions in the NABIP AMS (Member, Chapter Admin, State Admin, National Admin). Use when implementing permission checks, RLS policies,...
☆ 0View skill
GitHub
protection-audit
Audit protected files, generate protection reports, and verify protection consistency. Use for protection system maintenance and compliance.
☆ 0View skill
GitHub
global-validation
Implement server-side validation with allowlists, specific error messages, type checking, and sanitization to prevent security vulnerabilities and ensure data integrity. Use this skill when creating or editing...
☆ 0View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.