GitHub
fnox-secrets
Manages fnox encrypted secrets for the micelio project. Use when setting up secrets, adding new environment variables, configuring deployment credentials, or troubleshooting fnox/age encryption.
☆ 1View skill
documentation security AI Skills
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Categories: documentation security
documentation security Clear filters
Browse skills
GitHub
create-auth-skill
Skill for creating auth layers in TypeScript/JavaScript apps using Better Auth.
☆ 1View skill
GitHub
better-auth-best-practices
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
☆ 1View skill
GitHub
jwt-attack-surface
Audit JWT implementation for algorithm confusion, secret weakness, claim validation issues, and token handling vulnerabilities. Use when reviewing authentication systems using JWT.
☆ 1View skill
GitHub
crypto-audit
Audit cryptographic implementations for weak algorithms, insecure defaults, predictable randomness, key management issues, and timing attacks. Use when reviewing security-critical crypto code.
☆ 1View skill
GitHub
injection-hunter
Hunt for injection vulnerabilities including SQL injection, command injection, XSS, SSTI, path traversal, LDAP injection, and other input validation flaws. Use when auditing code that processes user input.
☆ 1View skill
GitHub
go-security-audit
Security audit for Go backend code and SDKs. Covers Go-specific vulnerabilities, common security pitfalls, and best practices. Use when auditing Go codebases.
☆ 1View skill
GitHub
authz-bypass-hunter
Hunt for authorization bypass vulnerabilities including IDOR, privilege escalation, missing access controls, broken object-level authorization. Use when auditing authentication/authorization code or API endpoin...
☆ 1View skill
GitHub
dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
☆ 1View skill
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
☆ 1View skill
GitHub
secrets-hunter
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
☆ 1View skill
GitHub
security-review
This skill should be used when the user asks to "security review", "check for vulnerabilities", "audit security", "find security issues", "security scan", "check for injection", "find hardcoded secrets", "OWASP...
☆ 1View skill
GitHub
security-design
Design security controls and threat mitigations. Use for features involving auth, data, or external exposure.
☆ 1View skill
GitHub
vulnerability-analysis
Identify vulnerability class, analyze root cause, and plan exploitation strategy.
☆ 1View skill
GitHub
security-baseline
Security requirements, threats, and controls that apply across this system.
☆ 1View skill
GitHub
security-scanning
Scan code for security vulnerabilities. Use after implementation changes.
☆ 1View skill
GitHub
audit-agent
Comprehensive security and code quality audit. Use for thorough security, vulnerability, and code quality analysis. Related: project-health-checker for quick diagnostic checks.
☆ 1View skill
GitHub
project-health-checker
Quick diagnostic tool (30s) running validation and health checks. Use for fast status checks. Related: audit-agent for comprehensive security and code quality audits.
☆ 1View skill
GitHub
frontend-backend-mapper
Analyzes and maps frontend API calls to backend endpoints. Detects missing endpoints, unused endpoints, and integration gaps. Optional: trace complete data flows to database and design tokens. Related: api-cont...
☆ 1View skill
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 1View skill
GitHub
auth-flow
IntelliFill authentication flow patterns using Supabase Auth, JWT tokens, and backend auth mode
☆ 1View skill
GitHub
authentication
Implement secure authentication with JWT, sessions, OAuth, and password hashing. Use when adding login/logout, token auth, or integrating OAuth providers.
☆ 1View skill
GitHub
security
Write secure web pages and applications. Use when handling user input, forms, external resources, authentication, or implementing security headers and CSP.
☆ 1View skill
GitHub
security-health-inline
Inline orchestration workflow for security vulnerability detection and remediation with Beads integration. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-f...
☆ 1View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.