security-audit
Includes sub-skills for OWASP Top 10 checks and ethical hacking heuristics.
Discover Research skills, compare source repositories and read the instructions for each workflow.
Includes sub-skills for OWASP Top 10 checks and ethical hacking heuristics.
Guidelines for integrating with the FraudShield Laravel backend API
Adds new users to Cloudflare Access authentication by updating ACCESS_ALLOWED_EMAIL in .env and syncing policies to all protected services. Use when you need to grant access to a new user, add someone to the ne...
Mapper field validation process ensuring zero missing fields
Use this skill when designing or reviewing systems where security is a concern - authentication, authorization, data protection, input handling, or any system processing untrusted input. Applies adversarial thi...
This skill should be used when the user asks to 'secure my API', 'implement authentication', 'configure Keycloak', 'add authorization', 'fix JWT issues', 'set up OAuth', 'review security', 'security audit', 'pe...
Comprehensive audit methodology for web applications covering accessibility (RGAA 4.1), security (OWASP Top 10), performance (Core Web Vitals), and eco-design. Use when users need guidance on audit processes, t...
Security review guidance. Use when reviewing code for security vulnerabilities, assessing authentication/authorization, or evaluating data handling.
Gate 1 validation: API specification quality checks
協助執行 PHP/Laravel 應用程式的安全性審計。當需要檢查安全漏洞、審查敏感資料處理、或評估 OWASP Top 10 風險時載入此技能。
Diagnoses and fixes Cloudflare Access authentication issues including Google OAuth errors, access denied after login, login loops, CookieMismatch errors, and "can only be used within its organization" errors. U...
Diagnoses and fixes HTTPS/SSL certificate issues in the network infrastructure by checking API tokens, validating Caddy configuration, and testing certificates. Use when certificates are not obtained, HTTPS is...
Implement secure authentication systems including signup, signin, password hashing, JWT tokens, and Better Auth integration.
How to integrate external APIs safely; how to store and query OpenAPI without polluting context.
Expert securite applicative et infrastructure - OWASP, pentest, secure coding, threat modeling. Utilise ce skill quand: (1) audit de securite applicative, (2) implementation SAST/DAST/IAST, (3) secure coding pr...
Detect clinical note sections (HPI, ROS, Assessment, Plan) using regex patterns and LLM topic segmentation. Generates ToC with accurate byte offsets.
Comprehensive research combining web search, quantum analysis, and persistent memory. Use when researching topics that need current information plus deep cognitive analysis.
Use when needing expert Linux kernel development assistance for device drivers, kernel modules, subsystems, and system programming. Triggers on "Linux kernel", "device driver", "kernel module", "kernel developm...
Use this skill when creating, optimizing, or improving prompts for large language models. Applies when users need help designing effective prompts, selecting appropriate prompting techniques, or troubleshooting...
Draft meaningful save messages that explain what changed and why it matters. Use when saving your work or explaining updates you've made.
Collects complete technical specifications from manufacturer sites, Amazon, and review sites with schema validation. Use when user asks to 'get specs', 'collect specifications', 'find technical details', 'produ...
This skill should be used when users request research on any topic that requires web search, source analysis, and structured documentation saved to a file. It provides a systematic workflow for gathering inform...
clerk expert with self-populating documentation
Mine AI research insights and generate professional LaTeX reports for creta.mx (Center for Research on Economics and Technology Applications). Triggers on "CRETA", "research insights", "LaTeX report", or econom...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.