GitHub
encore-auth
Implement authentication with auth handlers and gateways in Encore.ts.
☆ 14View skill
documentation security AI Skills
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Categories: documentation security
documentation security Clear filters
Browse skills
GitHub
tokenx-auth
Service-to-service authentication using TokenX token exchange in Nais
☆ 14View skill
GitHub
1password
Guide for implementing 1Password secrets management - CLI operations, service accounts, Developer Environments, and Kubernetes integration. Use when retrieving secrets, managing vaults, configuring CI/CD pipeli...
☆ 14View skill
GitHub
azure-ad-sso
Azure AD OAuth2/OIDC SSO integration for Kubernetes applications. Use when implementing Single Sign-On, configuring Azure AD App Registrations, restricting access by groups, or integrating tools (DefectDojo, Gr...
☆ 14View skill
GitHub
senhasegura-skill
Comprehensive senhasegura PAM platform skill for secrets management, credential vaulting, SSH key rotation, and DevOps secrets integration. Use when working with senhasegura A2A APIs, DSM CLI, MySafe, credentia...
☆ 14View skill
GitHub
json-validation
Centralized JSON validation for AGENT_SUCCESS_CRITERIA with defensive parsing and injection attack prevention (CVSS 8.2)
☆ 14View skill
GitHub
ldap-injection-testing
This skill should be used when the user asks to "test for LDAP injection vulnerabilities", "exploit LDAP queries", "perform blind LDAP injection attacks", "bypass authentication using LDAP injection", "extract...
☆ 14View skill
GitHub
external-network-penetration-testing
This skill should be used when the user asks to "perform external pentesting", "conduct external network assessment", "enumerate external attack surface", "perform OSINT reconnaissance", or "test perimeter secu...
☆ 14View skill
GitHub
jwt-security-testing
This skill should be used when the user asks to "test JWT security", "hack JWT tokens", "bypass JWT authentication", "crack JWT secrets", or "exploit JWT vulnerabilities". It provides comprehensive JSON Web Tok...
☆ 14View skill
GitHub
api-fuzzing-for-bug-bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
☆ 14View skill
GitHub
broken-authentication-testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
☆ 14View skill
GitHub
credential-harvesting-lab-setup
This skill should be used when the user asks to "build a phishing lab", "perform credential harvesting", "set up ARP spoofing", "configure DNS spoofing", "create a fake login page", or "test social engineering...
☆ 14View skill
GitHub
phishing-attacks
The assistant guides users through phishing attack simulation tools and techniques for penetration testing and security awareness. Activate when users ask about "phishing simulation," "social engineering testin...
☆ 14View skill
GitHub
security-audit
Security vulnerability analysis to detect hardcoded secrets, dangerous patterns, and unsafe code practices.
☆ 14View skill
GitHub
account-recovery
Guidance and guardrails for secure account recovery workflows including identity verification and password reset.
☆ 14View skill
GitHub
owasp-mobile-security-checker
Analyze Flutter and mobile applications for OWASP Mobile Top 10 (2024) security compliance. Use this skill when performing security audits, vulnerability assessments, or compliance checks on mobile applications...
☆ 14View skill
GitHub
auth
Authentication and authorization patterns including OAuth2, JWT, RBAC/ABAC, session management, API keys, password hashing, and MFA. USE WHEN: Implementing login flows, access control, identity management, tok...
☆ 13View skill
GitHub
data-validation
Data validation patterns including schema validation, input sanitization, output encoding, and type coercion. Use when implementing validate, validation, schema, form validation, API validation, JSON Schema, Zo...
☆ 13View skill
GitHub
security-audit
Performs comprehensive security audits identifying vulnerabilities, misconfigurations, and security best practice violations across applications, APIs, infrastructure, and data pipelines. Covers OWASP Top 10, c...
☆ 13View skill
GitHub
rate-limiting
API rate limiting and quota management implementation. Use when implementing request throttling, API quotas, backpressure handling, or protection against abuse. Keywords: rate limiting, rate limit, throttle, th...
☆ 13View skill
GitHub
powershell-security
Modern PowerShell security practices including SecretManagement, JEA, WDAC, and credential protection
☆ 13View skill
GitHub
nextjs-authentication
Complete Next.js authentication system. PROACTIVELY activate for: (1) NextAuth.js (Auth.js) setup, (2) OAuth providers (GitHub, Google), (3) Credentials provider, (4) Session management (JWT/database), (5) Prot...
☆ 13View skill
GitHub
security-first-2025
Security-first bash scripting patterns for 2025 (mandatory validation, zero-trust)
☆ 13View skill
GitHub
uncertainty-verification
Use when providing exact commands, flags, config keys, file paths, API details, standards, or version-specific behavior - enforces verification via official docs (Context7/web fetch), explicit citations, and ba...
☆ 13View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.