security-audit
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review", "audit", "check security", "vulnerabilities", or before deploying to production.
Discover documentation security skills, compare source repositories and read the instructions for each workflow.
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review", "audit", "check security", "vulnerabilities", or before deploying to production.
Secure management of environment variables and secrets across ACT projects. Use for secret audits, rotation, setup, sync, and security scans.
Map threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, GDPR. Generates compliance reports with coverage percentages and gaps. Use when checking compliance status, mapping to...
Orval APIクライアント生成スキル(OpenAPI仕様書から型安全なAPIクライアントを自動生成)
Automated code review analyzing security, performance, maintainability, and test coverage. Activated during code reviews or when conducting analysis.
Reviews code against learning-infra project standards for architecture compliance, code quality, tenant isolation, and test coverage. Reviews for REST API patterns, provisioning workflows, and infrastructure be...
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debug...
This skill should be used when the user asks to "store credentials", "secure API keys", "save SSH keys", "manage secrets", "prevent credential leaks", "encrypt tokens", or mentions system keychain, credential v...
Manage security policies, firewall zones, access control rules (ACLs), and guest network access. Perform comprehensive security audits and compliance reviews.
Comprehensive application security expertise covering authentication, authorization, OWASP Top 10, and security best practices. Use when (1) Implementing authentication (JWT, OAuth2, sessions, OAuth for CLI/TUI...
Interactive site verification for user journey testing. Use for full-stack verification, catching 404s, console errors, network failures, and DB state validation during development.
Modern authentication and security patterns for web applications. Expert in JWT tokens, OAuth2 flows, session management, RBAC, MFA, API security, and zero-trust architectures. Framework-agnostic patterns that...
React Native authentication patterns for Expo apps. Use when implementing login flows, Google/Apple sign-in, token management, session handling, or debugging auth issues in Expo/React Native.
Authentication patterns for React web applications. Use when implementing login flows, OAuth, JWT handling, session management, or protected routes in React web apps.
Best practices for implementing Clerk authentication with Expo (React Native) and Convex. Covers token caching, provider wrapping, and authenticated queries.
Manage authentication, authorization, and user sessions. Use when dealing with login, sign-up, API protection, middleware, or user data fetching.
Manage secrets in Oracle Cloud Infrastructure Vault via MCP. Provides 12 tools for complete secret lifecycle management including listing, searching, creating, updating, and deleting secrets. Compatible with an...
Reviews code for security vulnerabilities. Use when security concerns are detected or before deploying critical changes.
Use when accessing GitHub resources such as issues, PRs, repositories, or secrets
Autonomously verifying venue "Buzz" status and frontend rendering.
Create a new account when one doesn't exist. Use after lookup fails and user confirms they want to create a new account.
Analyze API documentation to extract authentication details and endpoints
Perform exhaustive zero-trust security audits of codebases, including dependency forensics, malicious code detection, secrets scanning, CI/CD security, and supply-chain attack analysis. Use when users request s...
Use when implementing authentication - login/signup forms, session management, protected routes, or role-based access control. NOT when non-auth UI, plain data fetching, or unrelated backend logic. Triggers: "l...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.