Discover devops security skills, compare source repositories and read the instructions for each workflow.
Perform a defensive security audit for Java backend services: input validation, SSRF, deserialization risks, secrets hygiene, and authz correctness. Use before release, after incidents, or during pen-test remed...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Automate vulnerability scans.
Establish contract testing (OpenAPI + consumer-driven contracts) with compatibility gates to prevent breaking changes in microservices. Use when API evolution risks breaking consumers or when you need CI enforc...
Standardize API communication, error handling, and authentication. Use when building new API services or debugging network issues.
Automate TLS certificates, rotation, and mTLS configuration.
安全漏洞檢測與修復專家。在撰寫處理用戶輸入、認證、API 端點或敏感資料的程式碼後主動使用。檢測機密資料外洩、SSRF、注入攻擊、不安全加密和 OWASP Top 10 漏洞。
Audit Java dependencies for vulnerabilities, licenses, duplicates, and version conflicts; produce an upgrade plan with pinned versions and risk notes. Use during security review, CVE response, or upgrade sprint...
DevSecOps practices for CI/CD and infrastructure. Covers OIDC authentication, secrets management, supply chain security, container hardening, and security scanning.
API integration patterns for building robust HTTP clients, handling authentication, error handling, and rate limiting.
Design RBAC/ABAC policies and permission boundaries.
Check authentication setup, user management, and run auth-related diagnostics
Scan images and runtime for CVEs and policy violations.
Validate GDPR, SOC2, HIPAA, PCI-DSS controls and audit trails.
Generate Swagger/Redoc docs and auth guides.
Security review checklist
Security review checklist for code and infrastructure
Implement OAuth2/OIDC/JWT, MFA, SSO, and session management.
Initialize Contextium session state and verify environment
Configure rate limits, auth, transforms, caching, and load balancing.
Apply secure coding practices and identify vulnerabilities. Use this skill when handling user input, authentication, authorization, secrets, or any security-sensitive code. Covers OWASP top 10, common vulnerabi...
Integrate vaults, secret rotation, and encryption.
Generate and scan QR codes for sharing and verification
Web Security Test Planner generating systematic, prioritized security testing plans based on OWASP WSTG.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.