Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Implement authentication, authorization, data protection, vulnerability checks, and security best practices. Use when adding authentication, protecting API endpoints, handling user data, or implementing securit...
Security review checklist and patterns
Authentication patterns for JWT, sessions, OAuth, MFA, and secure auth flows. Trigger: When implementing authentication, when setting up JWT tokens, when building login flows, when integrating OAuth providers,...
Security best practices covering OWASP Top 10, authentication, authorization, and common vulnerabilities. Trigger: When implementing authentication, when handling user input, when storing sensitive data, when b...
OWASP Top 10に準拠したセキュアなコード実装を支援。入力検証、認証・認可、 セキュアなエラーハンドリング、SQL/XSS/CSRF対策などのセキュリティ強化を実施。 「セキュリティチェック」「脆弱性スキャン」「OWASP準拠」など...
Expert in Identity and Access Management (IAM). Trigger this when implementing Login, Auth, RBAC, or Multi-tenancy logic.
Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.
Secure credential manager for environment variables. Use this skill when you see .env.example without .env.local, when user provides API keys or credentials, when setting up a new project, or when there are mis...
Expert in integrating third-party APIs with proper authentication, error handling, rate limiting, and retry logic. Use when integrating REST APIs, GraphQL endpoints, webhooks, or external services. Specializes...
Encrypts patient payload using AES-256-GCM cryptographic algorithm for HIPAA compliance
Enforces CSP, input sanitization, encryption standards, and GDPR compliance for clinical data
Complete guide for CloudBase Auth v2 using Web SDK (@cloudbase/js-sdk@2.x) - all login flows, user management, captcha handling, and best practices in one file.
Python security patterns and OWASP vulnerability detection
Security review and analysis for Frappe API endpoints decorated with @frappe.whitelist(). Use when reviewing API security, checking for permission vulnerabilities, scanning for unprotected endpoints, validating...
Expert guidance for creating, implementing, and troubleshooting AC (Access Control) Rules in Frappe Tweaks - an advanced rule-based permission system. Use when working with AC Rules, Query Filters, AC Resources...
A specialized skill for managing cryptographic assets (keys, CSRs, certificates) with strict policy enforcement and auditability.
Replaces the review process for strictly auditing specification formulation plans from a Technical Designer perspective to ensure developers can implement without confusion. Typical use cases: (1) Confirming de...
Replaces the task of strictly auditing created Issue drafts to ensure they align with the project's SSOT and agent values. Typical use cases: (1) Verifying the existence of linked file paths and format checking...
Validate session completion before ending work. Use when finishing a coding session to ensure state was saved and proof exists.
Create security zones and assign rights to profiles. Use when registering controllers.
Security review and vulnerability analysis. Use when asked to review code for security issues or harden implementations.
Security auditor that identifies vulnerabilities using OWASP guidelines
OWASP Top 10:2025 web security vulnerability guide. A skill referenced by security specialist subagents during code review, security audits, and vulnerability analysis. Provides background, explanation, prevent...
Define audit report structure and JSON schema for hallucination auditor outputs
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.