Discover tools security skills, compare source repositories and read the instructions for each workflow.
Authentication, authorization, Clerk integration, RLS policies, and security patterns. Use when working with security-resolver code, files, or integration. Invoke when navigating security-resolver codebase, sea...
Compare OpenAPI versions for Terraform provider updates
Guide for authenticating with Databricks Apps using cookie-based auth when OAuth/PAT tokens don't work. Use when connecting to Databricks Apps with User Authorization enabled.
Web application security testing using fuzzing techniques to discover vulnerabilities, injection points, and edge cases
Remote 요청 브릿지 스킬. Use when (1) 원격 상태 확인, (2) 대기 중인 요청 조회, (3) 수동 권한 승인/거부.
Phase 5 - Validation checks before publishing
Security patterns for Astro lead generation websites on Cloudflare. Forms, headers, bot protection, GDPR. Use for any production lead gen site.
Identify security vulnerabilities, performance issues, and code quality problems through systematic analysis adapted to project's technology stack and domain. Use when reviewing code, assessing security, auditi...
认证提供商统一接口，支持 Supabase Auth、Clerk、Firebase Auth 等主流认证服务。 提供用户注册、登录、OAuth、会话管理、权限验证等功能。
驗證工具組合。觸發詞：驗證, verify, check, 維度, dimension。
Ethics & Compliance Officer auditing for privacy, bias, and dark patterns.
Senior Security Auditor using OWASP Top 10 to identify vulnerabilities.
Build production-ready HTTP APIs with clean handlers, consistent error envelopes, health checks, CORS, and operational excellence.
Validate config at startup, secrets in memory only. Never read config during requests, never store secrets in env vars. Use node-env-resolver for multi-source config.
Guide for reviewing GitHub Actions for security vulnerabilities.
When you need to run code before a request completes: auth checks, redirects, headers, A/B testing. **Version Context**: Next.js 16.0+ uses `proxy.ts` (replaces `middleware.ts` from v15 and earlier).
Apply when implementing API authentication: JWT tokens, session management, API keys, and auth middleware. Follows JWT Best Current Practices (RFC 8725).
Apply when implementing authentication: sign up, sign in, OAuth providers, session management, and protected routes.
Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets. Identifies SQL injection, command injection, hardcoded credentials, weak cryptography, and insecure des...
A Zod v4 validation specialist.
Comprehensive plugin auditing for compliance with marketplace best practices. MUST Use when validating, refactoring, or improving plugin quality. Do not use for creating new plugins, scaffolding components, or...
Security audit checklist and best practices for bCommGuard WhatsApp bot
Security Advisor for vulnerability analysis and risk assessment. Reviews code and architecture for security issues. Use this skill for security review, vulnerability assessment, or risk analysis.
Security detection use cases for identifying threats across network, endpoint, identity, cloud, application, and email vectors. Use for building detection rules, analyzing security events, and threat hunting op...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.