consult-security-specialist
Expert on Application Security, Credential Management, and OAuth flows.
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Expert on Application Security, Credential Management, and OAuth flows.
Designs audit trails and security telemetry for fast detection and response, aligned with OWASP Logging Cheat Sheet.
Supabase security and performance guidelines with Clerk authentication integration. Contains 40+ rules across 10 categories covering RLS policies, Clerk setup, database security, and more.
Detect PII, mask data, and manage consent and encryption.
Scans for security vulnerabilities in Next.js + TS code/plans. Invoked by prompt-classifier in IMPLEMENT/EDIT sequences via "security-overseer ". Enforces auth, input validation, secret handling, OWASP complian...
Audit de sécurité du code. Analyse OWASP Top 10, dépendances vulnérables, secrets exposés, et configurations. Utiliser après l'implémentation ou avant une release.
Audit NutriProfile code for security vulnerabilities. Use this skill when reviewing authentication, authorization, data validation, API security, or RGPD compliance. Covers OWASP Top 10 and European data protec...
Security review and pragmatic threat modeling for endpoints, authentication, sensitive data, and integrations. Use when there is user input, authentication, sensitive data handling, or payments.
Perform a defensive security audit for Java backend services: input validation, SSRF, deserialization risks, secrets hygiene, and authz correctness. Use before release, after incidents, or during pen-test remed...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Automate vulnerability scans.
Establish contract testing (OpenAPI + consumer-driven contracts) with compatibility gates to prevent breaking changes in microservices. Use when API evolution risks breaking consumers or when you need CI enforc...
Standardize API communication, error handling, and authentication. Use when building new API services or debugging network issues.
Automate TLS certificates, rotation, and mTLS configuration.
安全漏洞檢測與修復專家。在撰寫處理用戶輸入、認證、API 端點或敏感資料的程式碼後主動使用。檢測機密資料外洩、SSRF、注入攻擊、不安全加密和 OWASP Top 10 漏洞。
Audit Java dependencies for vulnerabilities, licenses, duplicates, and version conflicts; produce an upgrade plan with pinned versions and risk notes. Use during security review, CVE response, or upgrade sprint...
DevSecOps practices for CI/CD and infrastructure. Covers OIDC authentication, secrets management, supply chain security, container hardening, and security scanning.
API integration patterns for building robust HTTP clients, handling authentication, error handling, and rate limiting.
Design RBAC/ABAC policies and permission boundaries.
Check authentication setup, user management, and run auth-related diagnostics
Scan images and runtime for CVEs and policy violations.
Validate GDPR, SOC2, HIPAA, PCI-DSS controls and audit trails.
Generate Swagger/Redoc docs and auth guides.
Security review checklist
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.