GitHub
csrf-testing
CSRF跨站请求伪造测试的专业技能和方法论
☆ 799查看技能
devops security AI 技能
发现 devops security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: devops security
devops security 清除筛选
全部技能
GitHub
ssrf-testing
SSRF服务器端请求伪造测试的专业技能和方法论
☆ 799查看技能
GitHub
cloud-security-audit
云安全审计的专业技能和方法论
☆ 799查看技能
GitHub
api-security-testing
API安全测试的专业技能和方法论
☆ 799查看技能
GitHub
xpath-injection-testing
XPath注入漏洞测试的专业技能和方法论
☆ 799查看技能
GitHub
ldap-injection-testing
LDAP注入漏洞测试的专业技能和方法论
☆ 799查看技能
GitHub
vulnerability-assessment
漏洞评估的专业技能和方法论
☆ 799查看技能
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 783查看技能
GitHub
oauth-social-login
Implement OAuth 2.0 social login with Google, GitHub, and other providers. Handles token exchange, user creation, and account linking.
☆ 756查看技能
GitHub
webhook-security
Implement secure webhook handling with signature verification, replay protection, and idempotency. Use when receiving webhooks from third-party services like Stripe, GitHub, Twilio, or building your own webhook...
☆ 756查看技能
GitHub
idempotency
Implement idempotent API operations to safely handle retries and prevent duplicate processing. Use when building payment APIs, order systems, or any operation that must not be executed twice.
☆ 756查看技能
GitHub
jwt-auth
Implement secure JWT authentication with refresh token rotation, secure storage, and automatic renewal. Use when building authentication for SPAs, mobile apps, or APIs that need stateless auth with refresh capa...
☆ 756查看技能
GitHub
rate-limiting
Implement subscription-tier aware API rate limiting with sliding window algorithm. Use when building SaaS APIs that need per-user or per-tier rate limits with Redis or in-memory storage.
☆ 756查看技能
GitHub
tier-entitlements
Implement subscription tier-based feature gating and usage limits. Centralized tier configuration, database usage tracking, and clean APIs for checking limits.
☆ 756查看技能
GitHub
file-uploads
Production-grade secure file upload pipeline with multi-stage validation, malware scanning (ClamAV), hash-based duplicate detection, and race condition protection using distributed locks.
☆ 756查看技能
GitHub
audit-logging
Comprehensive audit logging for compliance and security. Track user actions, data changes, and system events with tamper-proof storage.
☆ 756查看技能
GitHub
moai-platform-firebase-auth
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use when building Firebase-backed or Google ecosystem apps, implementing social login, or adding...
☆ 659查看技能
GitHub
moai-platform-clerk
Clerk modern authentication specialist covering WebAuthn, passkeys, passwordless, and beautiful UI components. Use when implementing modern auth with great UX.
☆ 659查看技能
GitHub
moai-platform-convex
Convex real-time backend specialist covering TypeScript-first reactive patterns, optimistic updates, server functions, and file storage. Use when building real-time collaborative apps, implementing reactive que...
☆ 659查看技能
GitHub
moai-platform-auth0
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses...
☆ 659查看技能
GitHub
onvifscan
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
☆ 651查看技能
GitHub
wsdiscovery
WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.
☆ 651查看技能
GitHub
ai-truthfulness-enforcer
MANDATORY verification system that prevents Claude Code instances from making false claims or fabricating evidence. Enforces cryptographic verification, real testing evidence, and automatic claim validation bef...
☆ 639查看技能
GitHub
secrets-scanner
Detects leaked API keys, tokens, passwords, and credentials in code with pre-commit hooks, CI checks, scanning rules, and remediation procedures. Use for "secret scanning", "credential detection", "API key leak...
☆ 626查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。