security-essentials
Security best practices, OWASP compliance, authentication patterns, and vulnerability prevention
发现 devops security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Security best practices, OWASP compliance, authentication patterns, and vulnerability prevention
Expert guidance for Keycloak identity and access management including realm configuration, client setup, user federation, authentication flows, role-based access control, and integration with applications. Use...
Expert guidance for Cosmian Key Management System including key generation, certificate management, encryption operations, access policies, and KMS CLI operations. Use this when working with Cosmian KMS, crypto...
Expert guidance for OAuth 2.0 protocol including authorization flows, grant types, token management, OpenID Connect, security best practices, and implementation patterns. Use this when implementing authenticati...
JWT、OAuth2、セッション管理、RBACを含む認証・認可パターンをマスターし、安全でスケーラブルなアクセス制御システムを構築。認証システムの実装、APIの保護、セキュリティ問題のデバッグ時に使用。
Validate REST API standards compliance (versioning, naming, HTTP methods, status codes, pagination, Swagger). Use when checking endpoints before deployment, reviewing API design, or ensuring documentation compl...
A comprehensive security skill that integrates with Secure Flow to help AI coding agents write secure code, perform security reviews, and implement security best practices. Use this skill when writing, reviewin...
Test REST and GraphQL APIs for authentication bypasses, authorization flaws, IDOR, mass assignment, injection attacks, and rate limiting issues. Use when pentesting APIs or testing microservices security.
Comprehensive security checklist covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, authorization, secrets management, input validation, and security headers. Use when scanning for vulnerabilities...
Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API flaws. Use when pentesting web apps, analyzing authentication, or exploit...
Comprehensive security vulnerability analysis for codebases and infrastructure. Scans dependencies (npm, pip, gem, go, cargo), containers (Docker, Kubernetes), cloud IaC (Terraform, CloudFormation), and detects...
Comprehensive audit of existing Stripe integration. Checks configuration, code patterns, security, and business model alignment.
Auto-load active audit context when working with audited code. Use when user is working on code that has an active audit session, discussing audit findings, or making changes related to a runtime audit. Silentl...
Clear the default organization preference. Use for managing authentication credentials
Get a value from the keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Display the API key for the currently authenticated user. Requires authentication. Use for managing authentication credentials
Show the current default organization. Use for managing authentication credentials
Display information about the currently authenticated user. Requires authentication. Use for managing authentication credentials
Set a secret. Requires authentication. Use for Agentuity cloud platform operations
List all secrets. Requires authentication. Use for Agentuity cloud platform operations
Get an environment variable or secret value. Requires authentication. Use for Agentuity cloud platform operations
Set the default organization for all commands. Requires authentication. Use for managing authentication credentials
Get a secret value. Requires authentication. Use for Agentuity cloud platform operations
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。