GitHub
clerk-auth-expert
Expert in Clerk authentication for React Native/Expo apps. Handles user authentication, session management, protected routes, and integration with backend services.
☆ 1查看技能
devops security AI 技能
发现 devops security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: devops security
devops security 清除筛选
全部技能
GitHub
secure-nextjs-api-routes
A comprehensive security middleware system for Next.js 13+ App Router API routes that provides authentication, rate limiting, CSRF protection, audit logging, and security headers in a composable, production-rea...
☆ 1查看技能
GitHub
wp-security
WordPress security best practices and vulnerability prevention for plugin development. Use when reviewing code for security issues or implementing security-sensitive features.
☆ 1查看技能
GitHub
security-health-inline
Inline orchestration workflow for security vulnerability detection and remediation with Beads integration. Provides step-by-step phases for security-scanner detection, priority-based fixing with vulnerability-f...
☆ 1查看技能
GitHub
reviewing-authentication-and-authorization-security
Use when reviewing authentication or authorization code. Provides comprehensive security guidance on JWT validation, token exchange, OAuth 2.0/2.1 compliance, PKCE, Resource Indicators, MCP authorization, sessi...
☆ 1查看技能
GitHub
curriculum-validate-cc
Validate IMS Common Cartridge 1.3 packages against spec, check manifest schema, verify file references, validate QTI assessments, and ensure LMS compatibility. Use when validating CC packages before delivery. A...
☆ 1查看技能
GitHub
learning-badge-system
badge-system for credentials, recognition, and competency validation.
☆ 1查看技能
GitHub
ai-security
Automatically applies when securing AI/LLM applications. Ensures prompt injection detection, PII redaction for AI contexts, output filtering, content moderation, and secure prompt handling.
☆ 1查看技能
GitHub
agent-ops-api-review
Platform/Language agnostic API delivery and correctness auditor. Use when project contains API endpoints to verify contract alignment, endpoint behavior, and test coverage.
☆ 1查看技能
GitHub
api-fuzzing-for-bug-bounty
This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guid...
☆ 1查看技能
GitHub
broken-authentication-testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test f...
☆ 1查看技能
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
☆ 1查看技能
GitHub
widget-security
Security patterns for loading and running third-party widgets in the 3SC host. Covers sandboxing, permissions, code signing, and trust levels.
☆ 1查看技能
GitHub
self-improvement
API 호출 후 결과 검증 및 오류 자동 수정 패턴. 검색 결과 품질 개선, 파라미터 자동 조정, 자동 재시도 구현 시 참조.
☆ 1查看技能
GitHub
auth
Better Auth authentication. Use for auth, login, logout, session, user, signup, register, protect, middleware, password, oauth, social
☆ 1查看技能
GitHub
the-auditor
Audits code and plans against the 9 Articles of Development and Pre-Implementation Gates. Use this skill before submitting code or when the user asks for a review.
☆ 1查看技能
GitHub
mr-robot
Security and data integrity checks for org run mr robot leak and org run mr robot db requests. Use when asked to audit PII exposure, auth gaps, or database issues.
☆ 1查看技能
GitHub
prowler-api
Prowler API patterns: JSON:API, RLS, RBAC, providers, Celery tasks. Trigger: When working in api/ on models/serializers/viewsets/filters/tasks involving tenant isolation (RLS), RBAC, JSON:API, or provider lifec...
☆ 1查看技能
GitHub
architecture-validation
Detect and validate client-authoritative vs server-authoritative architecture gaps
☆ 1查看技能
GitHub
prowler-test-api
Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC. Trigger: When writing tests for api/ (JSON:API requests/assertions, cross-tenant isolation, RBAC, Celery tasks, viewsets/serializer...
☆ 1查看技能
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 1查看技能
GitHub
api-auth-guards
Generate authentication and authorization guards (JWT, API key, roles, permissions) with tenant context validation. Use when protecting API endpoints or implementing RBAC.
☆ 1查看技能
GitHub
validate-urls
This skill should be used when the user asks to "validate external URLs", "check for link rot", "screenshot URLs", "archive external links", or wants to verify and document external web resources (http/https) r...
☆ 1查看技能
GitHub
better-auth
Add authentication with Better Auth (TypeScript). Use for email/password, OAuth providers (Google, GitHub), 2FA/MFA, passkeys/WebAuthn, sessions, RBAC, rate limiting.
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。