GitHub
secrets-management
Use when designing secret storage, rotation, or credential management systems. Covers HashiCorp Vault patterns, AWS Secrets Manager, Azure Key Vault, secret rotation, and zero-knowledge architectures.
☆ 21View skill
documentation security AI Skills
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Categories: documentation security
documentation security Clear filters
Browse skills
GitHub
secrets-management
Comprehensive guidance for secure secrets management including storage solutions (Vault, AWS Secrets Manager, Azure Key Vault), environment variables, secret rotation, scanning tools, and CI/CD pipeline securit...
☆ 21View skill
GitHub
security-frameworks
Security framework alignment including ISO 27001, SOC 2, NIST CSF 2.0, and CIS Controls mapping
☆ 21View skill
GitHub
container-security
Container and Kubernetes security patterns including Docker hardening, image scanning, pod security standards, network policies, RBAC, secrets management, and runtime protection. Use when securing containerized...
☆ 21View skill
GitHub
secure-coding
Provides guidance on secure coding practices including OWASP Top 10 2025, CWE Top 25, input validation, output encoding, and language-specific security patterns. Use when reviewing code for security vulnerabili...
☆ 21View skill
GitHub
authorization-models
Comprehensive authorization guidance covering RBAC, ABAC, ACL, ReBAC, and policy-as-code patterns. Use when designing permission systems, implementing access control, or choosing authorization strategies.
☆ 21View skill
GitHub
cryptography
Comprehensive cryptography guidance covering encryption algorithms, password hashing, TLS configuration, key management, and post-quantum considerations. Use when implementing encryption, choosing hashing algor...
☆ 21View skill
GitHub
api-security
Use when implementing API authentication, authorization, or security patterns. Covers OAuth 2.0, OIDC, JWT, API keys, rate limiting, and common API security vulnerabilities.
☆ 21View skill
GitHub
pci-dss-compliance
PCI DSS compliance planning for payment card handling including scope reduction, SAQ selection, and security controls
☆ 21View skill
GitHub
contract-test-design
Design consumer-driven contract testing strategies using Pact, verify provider contracts, and manage API evolution with contract-first approaches.
☆ 21View skill
GitHub
ad-security-reviewer
Use when user needs Active Directory security analysis, privileged group design review, authentication policy assessment, or delegation and attack surface evaluation across enterprise domains.
☆ 21View skill
GitHub
penetration-tester
Expert in ethical hacking, vulnerability assessment, and offensive security testing (Web/Network/Cloud).
☆ 21View skill
GitHub
compliance-auditor
Specialized auditor for SOC2, HIPAA, GDPR, and regulatory compliance frameworks across industries
☆ 21View skill
GitHub
security-engineer
Expert in infrastructure security, DevSecOps pipelines, and zero-trust architecture design.
☆ 21View skill
GitHub
m365-admin
Use when user needs Microsoft 365 administration, automation, and management for Exchange Online, Teams, SharePoint, licensing, and Graph API operations. Handles secure identity and workload automation.
☆ 21View skill
GitHub
agentic-jumpstart-security
Security best practices for TanStack Start applications with React 19, Drizzle ORM, PostgreSQL, Stripe, OAuth, and AWS S3/R2. Use when writing secure code, implementing authentication, handling payments, protec...
☆ 21View skill
GitHub
security-engineering
This skill should be used when auditing code for security issues, reviewing authentication/authorization, evaluating input validation, analyzing cryptographic usage, or reviewing dependency security. Provides O...
☆ 21View skill
GitHub
better-auth-setup
Guide implementation of OAuth 2.1 / OIDC authentication using Better Auth with the OIDC Provider plugin. Use this skill when setting up centralized authentication for multiple apps, implementing SSO across a pl...
☆ 21View skill
GitHub
configuring-better-auth
Implement OAuth 2.1 / OIDC authentication using Better Auth with MCP assistance. Use when setting up a centralized auth server (SSO provider), implementing SSO clients in Next.js apps, configuring PKCE flows, o...
☆ 21View skill
GitHub
better-auth-sso
Integrate with Better Auth SSO for OAuth2/OIDC authentication. Use this skill when implementing SSO login flows, PKCE authentication, token management, JWKS verification, or global logout in Next.js application...
☆ 21View skill
GitHub
onepassword-cli-coder
This skill guides integrating 1Password CLI (op) for secret management in development workflows. Use when loading secrets for infrastructure, deployments, or local development.
☆ 20View skill
GitHub
infra-security-review
Security patterns and checklists for reviewing Infrastructure-as-Code. Covers Terraform/OpenTofu state, secrets, network, compute, database, and storage security.
☆ 20View skill
GitHub
action-policy-coder
Use proactively for authorization with ActionPolicy. Creates policies, scopes, and integrates with GraphQL/ActionCable. Preferred over Pundit for composable, cacheable authorization.
☆ 20View skill
GitHub
fact-check
Verify claims in generated output against sources. Use as a separate pass AFTER content generation to catch hallucinations. Critical constraint - cannot be reliably combined with generation in a single pass.
☆ 20View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.