security-auditing
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
发现 区块链 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
A strict security and implementation guide for Better Auth, focusing on schema extension for user profiles and seamless Express.js integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Guide for ensuring application security. Use when reviewing code for vulnerabilities, validating inputs, or checking permissions.
Manages SSL certificate operations including checking expiry, monitoring renewal, forcing manual renewal, and backing up certificates. Use when checking certificate validity, monitoring auto-renewal, certificat...
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
Creates and manages Cloudflare Access service tokens for automated infrastructure verification and non-human access. Use when setting up automation, verification scripts, monitoring systems, or need to test ser...
security protocols for MCP agents. Use this to prevent Dynamic Capability Injection, Tool Shadowing, and Confused Deputy attacks when connecting to external servers.
Expert Security Engineer for PayU Digital Banking Platform - specializing in Application Security, DevSecOps, PCI-DSS compliance, and OJK regulations.
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Cl...
Enforces privacy protection patterns: anonymization, no PII in logs, secure data handling, GDPR compliance. Use when handling user data, implementing AI2AI, or ensuring privacy compliance.
セキュリティ専門家。脆弱性診断、脅威モデリング、セキュリティベストプラクティス適用を支援。使用場面: (1) セキュリティ脆弱性診断、(2) 脅威モデリング、(3) 認証・認可の設計レビュー、(4) データ保護の検証、(5) セキュ...
Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login methods (SMS, Email, WeChat Open Platform, Google, Anonymous, Username/password, OAuth, SAML,...
security protocols for agent context. Use this to implement strict data isolation, redact PII, and prevent memory poisoning or prompt injection attacks.
Includes sub-skills for OWASP Top 10 checks and ethical hacking heuristics.
Guidelines for integrating with the FraudShield Laravel backend API
Adds new users to Cloudflare Access authentication by updating ACCESS_ALLOWED_EMAIL in .env and syncing policies to all protected services. Use when you need to grant access to a new user, add someone to the ne...
Mapper field validation process ensuring zero missing fields
Use this skill when designing or reviewing systems where security is a concern - authentication, authorization, data protection, input handling, or any system processing untrusted input. Applies adversarial thi...
This skill should be used when the user asks to 'secure my API', 'implement authentication', 'configure Keycloak', 'add authorization', 'fix JWT issues', 'set up OAuth', 'review security', 'security audit', 'pe...
Comprehensive audit methodology for web applications covering accessibility (RGAA 4.1), security (OWASP Top 10), performance (Core Web Vitals), and eco-design. Use when users need guidance on audit processes, t...
Security review guidance. Use when reviewing code for security vulnerabilities, assessing authentication/authorization, or evaluating data handling.
Gate 1 validation: API specification quality checks
協助執行 PHP/Laravel 應用程式的安全性審計。當需要檢查安全漏洞、審查敏感資料處理、或評估 OWASP Top 10 風險時載入此技能。
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。