tenant-isolation-validation
Validate tenant isolation and RLS safety checks. Use when the user mentions tenant isolation, RLS validation, or multi-tenant access checks.
Discover DevOps skills, compare source repositories and read the instructions for each workflow.
Validate tenant isolation and RLS safety checks. Use when the user mentions tenant isolation, RLS validation, or multi-tenant access checks.
The 12 critical OpenAPI rules that cause immediate task failure if violated
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Build AWS SES email features with reCAPTCHA v3, Zod validation, XSS sanitisation, and rate limiting. Uses placeholders until env vars added to Vercel. Dual emails (owner + customer confirmation). Triggers: cont...
Validate RLS policies and role-based access. Use when the user mentions RLS testing, role access checks, or permissions validation.
Guides security validation checklist: Signal protocol security, encryption standards, authentication patterns, data protection. Use when validating security, reviewing security implementations, or ensuring secu...
Grants agents the instructions to run safety-checked penetration tests on cloud environments.
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Configures Cloudflare Access authentication with Google OAuth for protected services. Use when you need to set up authentication, configure Google OAuth, protect services with Cloudflare Access, enable remote a...
Lightweight validation for setup/configuration verification, workflow testing, and MCP connectivity checks. Applies to ~10 roadmap tasks requiring test execution, verification, or import/activation validation.
Security standards for credential handling and authentication
Validate profile files against the schema and OpenAPI operations. Use when creating or changing profiles or when validation errors appear.
This skill should be used when the user asks to 'configure Keycloak', 'set up ABAC', 'create Keycloak realm', 'integrate Azure AD with Keycloak', 'implement authorization services', 'configure OIDC client', 'cr...
Managing OpenCode sessions and context
Monitors and sanitizes all inputs to ensure zero storage of PHI, PII, or proprietary study secrets.
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
A strict security and implementation guide for Better Auth, focusing on schema extension for user profiles and seamless Express.js integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Guide for ensuring application security. Use when reviewing code for vulnerabilities, validating inputs, or checking permissions.
Manages SSL certificate operations including checking expiry, monitoring renewal, forcing manual renewal, and backing up certificates. Use when checking certificate validity, monitoring auto-renewal, certificat...
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
Creates and manages Cloudflare Access service tokens for automated infrastructure verification and non-human access. Use when setting up automation, verification scripts, monitoring systems, or need to test ser...
security protocols for MCP agents. Use this to prevent Dynamic Capability Injection, Tool Shadowing, and Confused Deputy attacks when connecting to external servers.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.