GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 36查看技能
blockchain security AI 技能
发现 blockchain security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: blockchain security
blockchain security 清除筛选
全部技能
GitHub
rest-api
REST API standards for Java Spring services. Covers Bitso API guidelines, authentication integration, OpenAPI documentation, and RFC-37 service documentation. Use when creating or maintaining REST endpoints.
☆ 35查看技能
GitHub
security-review
Performs security analysis on code changes including credential scanning, input validation, authentication checks, and dependency vulnerability assessment. Use when reviewing code for security issues or before...
☆ 35查看技能
GitHub
cloudflare-tunnel
Authenticate requests through Cloudflare Access / Cloudflare Tunnel using Service Token headers. Use when accessing services protected by Cloudflare Zero Trust.
☆ 34查看技能
GitHub
kirby-security-and-auth
Secures Kirby sites with access restriction, user roles, permissions, and protected downloads. Use when implementing login/role-based access, permissions, or file protection.
☆ 34查看技能
GitHub
compliance-testing
Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.
☆ 34查看技能
GitHub
api-testing-patterns
Apply comprehensive API testing patterns including contract testing, REST/GraphQL testing, and integration testing. Use when testing APIs, microservices, or designing API test strategies.
☆ 34查看技能
GitHub
security-testing
Test for security vulnerabilities using OWASP principles and security testing techniques. Use when conducting security audits, testing authentication/authorization, or implementing security practices.
☆ 34查看技能
GitHub
penetration-tester
Expert penetration tester specializing in ethical hacking, vulnerability assessment, and security testing. Masters offensive security techniques, exploit development, and comprehensive security assessments with...
☆ 32查看技能
GitHub
resonance-reviewer
Code Reviewer Specialist. Use this to review PRs, check security, and ensure code quality standards before merging.
☆ 32查看技能
GitHub
resonance-security
Security Auditor Specialist. Use this to review PRs for vulnerabilities, perform STRIDE threat modeling, and ensure zero-trust architecture.
☆ 32查看技能
GitHub
authn-authz-review
Workflow to review authentication and authorization flows (sessions, tokens, RBAC/ABAC) and produce fix guidance.
☆ 32查看技能
GitHub
input-validation-hardening
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
☆ 32查看技能
GitHub
secrets-and-logging-hygiene
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
☆ 32查看技能
GitHub
secure-code-review
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
☆ 32查看技能
GitHub
security-audit
Security best practices including CSP, XSS prevention, input validation, and secrets management. Use when reviewing security or hardening applications.
☆ 32查看技能
GitHub
software-security-appsec
Modern application security patterns aligned with OWASP Top 10:2025 (final), OWASP API Security Top 10 (2023), NIST SSDF, zero trust (incl. NSA ZIGs 2026), supply chain security (SBOM), passkeys/WebAuthn, authe...
☆ 31查看技能
GitHub
qa-docs-coverage
Docs as QA: audit doc coverage and freshness, validate runbooks, and maintain documentation quality gates for APIs, services, events, and operational workflows. Includes AI-assisted audits, observability patter...
☆ 31查看技能
GitHub
user-investigation
Use this skill when asked to investigate a user account for security issues, suspicious activity, or compliance review. Triggers on keywords like "investigate user", "security investigation", "user investigatio...
☆ 30查看技能
GitHub
ca-policy-investigation
Use this skill when asked to investigate Conditional Access policy changes, sign-in failures related to CA policies (error codes 53000, 50074, 530032), or suspected policy bypass/manipulation. Triggers on keywo...
☆ 30查看技能
GitHub
authentication-tracing
Use this skill when asked to trace authentication flows, analyze SessionId chains, investigate token reuse vs interactive MFA, or assess geographic anomalies in sign-ins. Triggers on keywords like "trace authen...
☆ 30查看技能
GitHub
security-threat-model
Use when designing or reviewing systems handling sensitive data (PII, PHI, financial, auth credentials), building features with security implications (auth, payments, file uploads, APIs), preparing for security...
☆ 30查看技能
GitHub
security-audit
RLS validation, security audits, OWASP compliance, and vulnerability scanning. Use when validating RLS policies, auditing API routes, or scanning for security issues.
☆ 30查看技能
GitHub
security-audit
RLS validation, security audits, OWASP compliance, and vulnerability scanning. Use when validating RLS policies, auditing API routes, scanning for security issues, or reviewing code for vulnerabilities.
☆ 30查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。