Discover devops security skills, compare source repositories and read the instructions for each workflow.
Guides security validation checklist: Signal protocol security, encryption standards, authentication patterns, data protection. Use when validating security, reviewing security implementations, or ensuring secu...
Grants agents the instructions to run safety-checked penetration tests on cloud environments.
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Configures Cloudflare Access authentication with Google OAuth for protected services. Use when you need to set up authentication, configure Google OAuth, protect services with Cloudflare Access, enable remote a...
Lightweight validation for setup/configuration verification, workflow testing, and MCP connectivity checks. Applies to ~10 roadmap tasks requiring test execution, verification, or import/activation validation.
Security standards for credential handling and authentication
Validate profile files against the schema and OpenAPI operations. Use when creating or changing profiles or when validation errors appear.
This skill should be used when the user asks to 'configure Keycloak', 'set up ABAC', 'create Keycloak realm', 'integrate Azure AD with Keycloak', 'implement authorization services', 'configure OIDC client', 'cr...
Managing OpenCode sessions and context
Monitors and sanitizes all inputs to ensure zero storage of PHI, PII, or proprietary study secrets.
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
A strict security and implementation guide for Better Auth, focusing on schema extension for user profiles and seamless Express.js integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Guide for ensuring application security. Use when reviewing code for vulnerabilities, validating inputs, or checking permissions.
Manages SSL certificate operations including checking expiry, monitoring renewal, forcing manual renewal, and backing up certificates. Use when checking certificate validity, monitoring auto-renewal, certificat...
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
Creates and manages Cloudflare Access service tokens for automated infrastructure verification and non-human access. Use when setting up automation, verification scripts, monitoring systems, or need to test ser...
security protocols for MCP agents. Use this to prevent Dynamic Capability Injection, Tool Shadowing, and Confused Deputy attacks when connecting to external servers.
Expert Security Engineer for PayU Digital Banking Platform - specializing in Application Security, DevSecOps, PCI-DSS compliance, and OJK regulations.
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Cl...
Enforces privacy protection patterns: anonymization, no PII in logs, secure data handling, GDPR compliance. Use when handling user data, implementing AI2AI, or ensuring privacy compliance.
セキュリティ専門家。脆弱性診断、脅威モデリング、セキュリティベストプラクティス適用を支援。使用場面: (1) セキュリティ脆弱性診断、(2) 脅威モデリング、(3) 認証・認可の設計レビュー、(4) データ保護の検証、(5) セキュ...
Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login methods (SMS, Email, WeChat Open Platform, Google, Anonymous, Username/password, OAuth, SAML,...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.