Discover tools security skills, compare source repositories and read the instructions for each workflow.
Design and implement robust JWT-based authentication (AuthN) and authorization (AuthZ): verification, claims validation, key rotation, token lifetimes, and safe error handling. Use when implementing login/permi...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features in Rust. Provides a comprehensive security checklist and...
Comprehensive security vulnerability scanner for Python projects including Flask, Django, and FastAPI applications. Detects OWASP Top 10 vulnerabilities, injection flaws, insecure deserialization, authenticatio...
Identify vulnerabilities using adversarial thinking and OWASP standards.
Security audit guidelines covering OWASP Top 10 vulnerabilities, secure coding practices, authentication patterns, and code review checklists
Managing OpenCode sessions and context
deduplicates within request
Authentication, RBAC, and Hardening standards.
Penetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.
Prevent secret leakage and implement robust error monitoring.
Audit OWASP Top 10, dependencies, secrets, and CVE exposure.
Authentication, authorization, and security patterns for MuebleriaIris ERP. Trigger: When implementing authentication, JWT, sessions, RBAC, or security features.
Setup Interactor platform authentication with OAuth client credentials. Use when integrating with Interactor for credential management, AI agents, or workflows. Covers account registration, OAuth client creatio...
Implement OAuth flows and manage credentials for external services (Google, Slack, Salesforce, etc.) through Interactor. Use when connecting users to third-party services, handling OAuth authorization, retrievi...
Comprehensive audit of Expo/React Native app API integration layer. Use when asked to: (1) Review API interactions, auth handling, or token management, (2) Find hardcoded data or screens bypassing API, (3) Veri...
Build custom sign-in and sign-up authentication flows with Clerk's useSignIn and useSignUp hooks. Use this skill when the user asks to build sign-in or sign-up flows using Clerk, or when JavaScript/TypeScript f...
Atlassian CLI tool installation and authentication.
Inspire team security guidelines and secrets management. Use when handling sensitive data, authentication, or security reviews.
Authentication and access control skill for Next.js 15 + Supabase applications. Use when implementing user authentication, protecting routes, managing user sessions, enforcing role-based access control (admin/m...
Automated compliance evidence collection for AWS, GCP, and Azure with SOC 2, ISO 27001, NIST 800-53, and CIS benchmark mappings.
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review", "audit", "check security", "vulnerabilities", or before deploying to production.
Secure management of environment variables and secrets across ACT projects. Use for secret audits, rotation, setup, sync, and security scans.
Map threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, GDPR. Generates compliance reports with coverage percentages and gaps. Use when checking compliance status, mapping to...
Orval APIクライアント生成スキル（OpenAPI仕様書から型安全なAPIクライアントを自動生成）
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.