security-authentication
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Discover tools security skills, compare source repositories and read the instructions for each workflow.
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Configures Cloudflare Access authentication with Google OAuth for protected services. Use when you need to set up authentication, configure Google OAuth, protect services with Cloudflare Access, enable remote a...
Apply when working with GitHub repositories, issues, PRs, or authentication
Lightweight validation for setup/configuration verification, workflow testing, and MCP connectivity checks. Applies to ~10 roadmap tasks requiring test execution, verification, or import/activation validation.
Security standards for credential handling and authentication
Validate profile files against the schema and OpenAPI operations. Use when creating or changing profiles or when validation errors appear.
This skill should be used when the user asks to 'configure Keycloak', 'set up ABAC', 'create Keycloak realm', 'integrate Azure AD with Keycloak', 'implement authorization services', 'configure OIDC client', 'cr...
Managing OpenCode sessions and context
Monitors and sanitizes all inputs to ensure zero storage of PHI, PII, or proprietary study secrets.
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
A strict security and implementation guide for Better Auth, focusing on schema extension for user profiles and seamless Express.js integration.
Security policy and vulnerability reporting
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Guide for ensuring application security. Use when reviewing code for vulnerabilities, validating inputs, or checking permissions.
Manages SSL certificate operations including checking expiry, monitoring renewal, forcing manual renewal, and backing up certificates. Use when checking certificate validity, monitoring auto-renewal, certificat...
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
Creates and manages Cloudflare Access service tokens for automated infrastructure verification and non-human access. Use when setting up automation, verification scripts, monitoring systems, or need to test ser...
security protocols for MCP agents. Use this to prevent Dynamic Capability Injection, Tool Shadowing, and Confused Deputy attacks when connecting to external servers.
Expert Security Engineer for PayU Digital Banking Platform - specializing in Application Security, DevSecOps, PCI-DSS compliance, and OJK regulations.
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Cl...
Security review checklist
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.