security-review
Security audit guidelines covering OWASP Top 10 vulnerabilities, secure coding practices, authentication patterns, and code review checklists
Discover devops security skills, compare source repositories and read the instructions for each workflow.
Security audit guidelines covering OWASP Top 10 vulnerabilities, secure coding practices, authentication patterns, and code review checklists
Managing OpenCode sessions and context
deduplicates within request
Authentication, RBAC, and Hardening standards.
Penetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.
Prevent secret leakage and implement robust error monitoring.
Audit OWASP Top 10, dependencies, secrets, and CVE exposure.
Authentication, authorization, and security patterns for MuebleriaIris ERP. Trigger: When implementing authentication, JWT, sessions, RBAC, or security features.
Setup Interactor platform authentication with OAuth client credentials. Use when integrating with Interactor for credential management, AI agents, or workflows. Covers account registration, OAuth client creatio...
Implement OAuth flows and manage credentials for external services (Google, Slack, Salesforce, etc.) through Interactor. Use when connecting users to third-party services, handling OAuth authorization, retrievi...
Comprehensive audit of Expo/React Native app API integration layer. Use when asked to: (1) Review API interactions, auth handling, or token management, (2) Find hardcoded data or screens bypassing API, (3) Veri...
Build custom sign-in and sign-up authentication flows with Clerk's useSignIn and useSignUp hooks. Use this skill when the user asks to build sign-in or sign-up flows using Clerk, or when JavaScript/TypeScript f...
Atlassian CLI tool installation and authentication.
Inspire team security guidelines and secrets management. Use when handling sensitive data, authentication, or security reviews.
Authentication and access control skill for Next.js 15 + Supabase applications. Use when implementing user authentication, protecting routes, managing user sessions, enforcing role-based access control (admin/m...
Automated compliance evidence collection for AWS, GCP, and Azure with SOC 2, ISO 27001, NIST 800-53, and CIS benchmark mappings.
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review", "audit", "check security", "vulnerabilities", or before deploying to production.
Secure management of environment variables and secrets across ACT projects. Use for secret audits, rotation, setup, sync, and security scans.
Map threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, GDPR. Generates compliance reports with coverage percentages and gaps. Use when checking compliance status, mapping to...
Orval APIクライアント生成スキル(OpenAPI仕様書から型安全なAPIクライアントを自動生成)
Automated code review analyzing security, performance, maintainability, and test coverage. Activated during code reviews or when conducting analysis.
Reviews code against learning-infra project standards for architecture compliance, code quality, tenant isolation, and test coverage. Reviews for REST API patterns, provisioning workflows, and infrastructure be...
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debug...
This skill should be used when the user asks to "store credentials", "secure API keys", "save SSH keys", "manage secrets", "prevent credential leaks", "encrypt tokens", or mentions system keychain, credential v...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.