Discover tools security skills, compare source repositories and read the instructions for each workflow.
API versioning, security, authentication, rate limiting, monitoring, error handling, and documentation strategies for production APIs. Use when planning API infrastructure, implementing security concerns, or de...
inkLine security checklist to protect the application from common attacks
Provides expert security analysis, vulnerability assessment, and threat modeling. Use for security reviews, OWASP analysis, auth/authorization assessment, compliance posture, or attack surface analysis. Produce...
Manage IP whitelist for Provider Nexus API clients using TypeScript scripts that make curl calls to the admin API endpoints.
Conducts comprehensive security code reviews including vulnerability detection (OWASP Top 10, CWE), authentication/authorization flaws, injection attacks, cryptography issues, sensitive data exposure, API secur...
Provides comprehensive KeyCloak administration guidance including realm management, user/group administration, client configuration, authentication flows, identity brokering, authorization policies, security ha...
Comprehensive security verification - audit dependencies, check for vulnerabilities, verify constant-time ops
OWASP-obsessed security reviewer. Will find your vulnerabilities and make you feel bad about them.
JWT authentication implementation with bcrypt, refresh tokens, and rate limiting. Use for auth-related development, login, registration, or token handling.
Comprehensive API endpoint validation including schema validation, authentication testing, and error handling
Senior security engineer specializing in application security, vulnerability assessment, and secure coding practices. Masters penetration testing, security auditing, and implementing comprehensive security cont...
Expert in JSON Web Token (JWT) implementation, security best practices, and token-based authentication. Masters token generation, validation, refresh mechanisms, and securing RESTful APIs with OAuth 2.0.
Verifies that an authorized user has approved the fix plan before proceeding with implementation.
Review code for application-level security hardening issues beyond framework checklists. Focuses on abuse prevention, API protection, business logic exploitation, rate limiting, input validation, and early requ...
Keep development token use low by refreshing and relying on local context packs.
Implement and optimize rate limiting for APIs and routes. Use when protecting endpoints, preventing abuse, or managing resource usage across different user tiers.
Troubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
Guide users through creating and configuring a GitHub App for workspace authentication. Use when setting up GitHub App authentication for happy-little-claude-coders, creating github-app-credentials secret, or c...
Expert implementation of user authentication and authorization using Better Auth library for Next.js 15+/React 18+ frontends and Node.js/FastAPI backends with SQL and NoSQL databases. Use when implementing auth...
Use when implementing quantum-resistant cryptographic signing. Triggers: "quantum signing", "ML-DSA", "post-quantum", "operation signing", "quantum-resistant". NOT for: Standard encryption or non-cryptographic...
Locked auth + authorization pattern for coverage-nextjs. Always reuse AuthContext + withAuth + existing helpers. Never create new auth routes or invent roles/permission logic.
Shared Vista Social integration rules and references (base URL, auth, error handling, and global constraints). Use before any Vista Social endpoint work.
Role-based access control with RoleHandler
This skill provides Zod 4 validation patterns and conventions for the fitness app. Use when writing validation schemas, working with ISO dates, or validating API inputs.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.