GitHub
secure-storage-patterns
expo-secure-store patterns for sensitive data. Use when storing tokens and credentials.
☆ 2View skill
documentation security AI Skills
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Categories: documentation security
documentation security Clear filters
Browse skills
GitHub
secure-coding
Security best practices for Go applications. Use when writing security-sensitive code.
☆ 2View skill
GitHub
authentication-strategies
Authentication patterns including JWT, sessions, and OAuth. Use when implementing user authentication.
☆ 2View skill
GitHub
security-scanning
Security scanning with dependency audits, secret detection, static analysis, and vulnerability management. Use when checking for vulnerabilities, scanning dependencies, or enforcing security gates.
☆ 2View skill
GitHub
security-review
Security review for blockchain and cryptographic code. Use when reviewing PRs, auditing code, checking for vulnerabilities, or when security is mentioned.
☆ 2View skill
GitHub
crypto
Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.
☆ 2View skill
GitHub
1password-credential-lookup
This skill should be used when agents need to log into websites, retrieve passwords, or access credentials. CRITICAL - always use find_credential with the website URL, never guess item names.
☆ 2View skill
GitHub
security
Production-grade security testing skill with OWASP Top 10, vulnerability scanning, penetration testing guidance, and compliance validation
☆ 2View skill
GitHub
rfc-review
Guide OAK RFC validation with quality assessment frameworks, review rubrics, and structured feedback patterns.
☆ 2View skill
GitHub
security
Database security, access control, and data protection
☆ 2View skill
GitHub
spring-security
Secure Spring Boot applications - authentication, authorization, OAuth2, JWT, CORS/CSRF protection
☆ 2View skill
GitHub
php-api
PHP API development mastery - REST, GraphQL, JWT/OAuth, OpenAPI documentation
☆ 2View skill
GitHub
security
DevSecOps practices including secrets management, SSL/TLS, vulnerability scanning, and compliance
☆ 2View skill
GitHub
aws-security-best-practices
Implement comprehensive AWS security controls and compliance
☆ 2View skill
GitHub
security-auditor
Activates when user needs security review, vulnerability scanning, or secure coding guidance. Triggers on "security review", "find vulnerabilities", "is this secure", "check for injection", "security audit", "O...
☆ 2View skill
GitHub
express-api-development
Master Express.js API development with middleware, routing, validation, authentication, and production best practices. Build scalable RESTful APIs with Express.
☆ 2View skill
GitHub
security-documentation
Master security documentation with security policies, incident response plans, security procedures, and compliance documentation.
☆ 2View skill
GitHub
security-assessment
Master security assessments with vulnerability scanning, penetration testing, security testing, and security audits.
☆ 2View skill
GitHub
devsecops-lookup
Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security. Use when user asks about "DevSecOps", "SAS...
☆ 2View skill
GitHub
form-security-analyzer
Static security analysis of HTML forms without sending any requests. Checks for CSRF tokens, insecure actions, missing validation, hidden field issues, and common security misconfigurations. Safe to run - no pa...
☆ 2View skill
GitHub
secret-scanner
Scans git repositories for hardcoded secrets, credentials, and API keys using Gitleaks. Returns findings with severity, location, and remediation steps. Use when user asks to "scan for secrets", "detect credent...
☆ 2View skill
GitHub
web-resource-checker
Validates essential web resource files (sitemap.xml, robots.txt, llms.txt, security.txt) for compliance with their specifications. Use when user asks about "sitemap validation", "robots.txt check", "llms.txt",...
☆ 2View skill
GitHub
using-loaded-knowledge
MANDATORY protocol enforcing knowledge check before EVERY response - prevents explaining systems without reading docs, claiming without verification, and ignoring auto-loaded context
☆ 2View skill
GitHub
orca-confirm
Handle team confirmation with automatic bypass mode detection for /orca
☆ 2View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.