security-karen
OWASP-obsessed security reviewer. Will find your vulnerabilities and make you feel bad about them.
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
OWASP-obsessed security reviewer. Will find your vulnerabilities and make you feel bad about them.
JWT authentication implementation with bcrypt, refresh tokens, and rate limiting. Use for auth-related development, login, registration, or token handling.
Comprehensive API endpoint validation including schema validation, authentication testing, and error handling
Senior security engineer specializing in application security, vulnerability assessment, and secure coding practices. Masters penetration testing, security auditing, and implementing comprehensive security cont...
Expert in JSON Web Token (JWT) implementation, security best practices, and token-based authentication. Masters token generation, validation, refresh mechanisms, and securing RESTful APIs with OAuth 2.0.
Verifies that an authorized user has approved the fix plan before proceeding with implementation.
Review code for application-level security hardening issues beyond framework checklists. Focuses on abuse prevention, API protection, business logic exploitation, rate limiting, input validation, and early requ...
Keep development token use low by refreshing and relying on local context packs.
Implement and optimize rate limiting for APIs and routes. Use when protecting endpoints, preventing abuse, or managing resource usage across different user tiers.
Troubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
Guide users through creating and configuring a GitHub App for workspace authentication. Use when setting up GitHub App authentication for happy-little-claude-coders, creating github-app-credentials secret, or c...
Expert implementation of user authentication and authorization using Better Auth library for Next.js 15+/React 18+ frontends and Node.js/FastAPI backends with SQL and NoSQL databases. Use when implementing auth...
Use when implementing quantum-resistant cryptographic signing. Triggers: "quantum signing", "ML-DSA", "post-quantum", "operation signing", "quantum-resistant". NOT for: Standard encryption or non-cryptographic...
Locked auth + authorization pattern for coverage-nextjs. Always reuse AuthContext + withAuth + existing helpers. Never create new auth routes or invent roles/permission logic.
Shared Vista Social integration rules and references (base URL, auth, error handling, and global constraints). Use before any Vista Social endpoint work.
Role-based access control with RoleHandler
This skill provides Zod 4 validation patterns and conventions for the fitness app. Use when writing validation schemas, working with ISO dates, or validating API inputs.
Create and edit professional email templates for Authentik SSO authentication flows. Use when working with Authentik email templates (.html files) for authentication events such as password reset, account confi...
Personal AI Infrastructure core. AUTO-LOADS at session start. USE WHEN any session begins OR user asks about identity, response format, contacts, stack preferences, security protocols, or asset management.
Automatically authenticate GitHub CLI using .gh-token.txt when seeing errors about "gh auth login", "GH_TOKEN environment variable", or "not logged into any GitHub hosts"
Secure API Platform resources with security expressions, voters, and operation-level access control. WHEN: Adding security to API operations, writing security expressions, creating custom voters, implementing r...
Authentication and session management patterns with Supabase Auth. Use when implementing login flows, OAuth providers, session handling, protected routes, or RLS policies based on authentication.
Tooling and verification. Apply when encountering unfamiliar third-party libraries, framework updates, uncertain parameter types, verifying best practices, or uncertain API parameters.
Sa-Token 权限认证框架开发规范。当进行登录认证、权限校验、角色管理、JWT Token 处理时自动使用。
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.