Discover tools security skills, compare source repositories and read the instructions for each workflow.
Analyzes and maps frontend API calls to backend endpoints. Detects missing endpoints, unused endpoints, and integration gaps. Optional: trace complete data flows to database and design tokens. Related: api-cont...
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
IntelliFill authentication flow patterns using Supabase Auth, JWT tokens, and backend auth mode
Implement secure authentication with JWT, sessions, OAuth, and password hashing. Use when adding login/logout, token auth, or integrating OAuth providers.
Write secure web pages and applications. Use when handling user input, forms, external resources, authentication, or implementing security headers and CSP.
Inline orchestration workflow for security vulnerability detection and remediation with Beads integration. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-f...
Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT, secrets, API keys, SQL injection, XSS, CSRF, RLS, security audit, pen testing basics.
Authentication and authorization patterns using Clerk and RBAC
Complete WorkOS authentication management including OAuth, SSO, SCIM, email templates, domain verification, and user management. Use for enterprise auth configuration.
Use when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machine
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティレビュー、脆弱性チェック、バージョン管理確認を依頼された時。
セキュリティレビュースキル。OWASP Top 10に基づくセキュリティ脆弱性のチェック。SQLインジェクション、XSS、認証・認可、暗号化などの観点でコードをレビュー。「セキュリティレビュー」「脆弱性チェック」「セキュリティ確...
Detect configuration drift using hash-based verification
Perform comprehensive security analysis to identify vulnerabilities. Integrates with codex-review for automatic security checks. Covers OWASP Top 10, common vulnerabilities, and secure coding practices. Output:...
檢查應用程式的安全配置，包括 HTTPS、CORS、Security Headers、Cookie 等
掃描程式碼和配置檔中的敏感資料洩漏，包括 API Keys、密碼、Token 等
執行完整的應用程式安全掃描，檢查 OWASP Top 10 漏洞、敏感資料洩漏、依賴套件漏洞和安全配置問題。
深度程式碼安全審查，檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
Supabase schema validation, RLS enforcement, and API security best practices.
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.
Explain and validate what was implemented in the current session.
Security scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive...
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.