发现 devops security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
Design and implement secure admin APIs in Next.js 16 with hardened security, RBAC, CSRF protection, tenant isolation, and audit logging. Use when creating new admin API routes, implementing security controls, o...
Thorough, adversarial security review of API endpoints, UI flows that call those endpoints, and any database-interacting code. Use when the user asks for a security review, permission/authorization audit, red-t...
Performs security audits checking for exposed secrets, weak authentication, SQL injection, XSS vulnerabilities, and validates security best practices
Execute review crypto wallet security including private key management and transaction signing. Use when auditing wallet security practices. Trigger with phrases like "audit wallet", "check security", or "verif...
Generate salted hash URLs with QR codes displayed in terminal. Use when user wants to create a unique URL with a random salt appended to an identifier, or needs a QR code linking to a user profile page. Trigger...
Generate secure random passwords or memorable passphrases. Use when user needs a password, passphrase, secret key, or asks for help creating secure credentials.
Install, configure, and manage the Claude Code Damage Control security hooks system. Use when user mentions damage control, security hooks, protected paths, blocked commands, install security, or modify protect...
Documentation Guardian. Detects stale docs and enforces update rules.
Issues a proxy audit verdict for a session.
Escalates a session issue to a human reviewer.
Issues a proxy audit verdict for a session.
Escalates a session issue to a human reviewer.
Checks session compliance against a Rule of Constraints policy.
Checks session compliance against a Rule of Constraints policy.
Security audit patterns and OWASP Top 10 vulnerability detection. Auto-triggers when reviewing code for security, handling authentication, or processing user input.
Implement authentication with Supabase, OAuth providers, and session management. Use when adding login, OAuth flows, or protecting routes.
React Server Components (RSC) の利用方針とセキュリティ基準に基づき、データの安全性と疎結合性を監査します。
Atomic Validation Protocol: Unified validator for Chroma Check and Librarian Audit.
Identify dangerous-but-tempting API patterns in React/Next.js/Supabase. Finds "footguns" - APIs that look safe but fail silently or have dangerous defaults. Inspired by Trail of Bits methodology.
Verify that security fixes actually resolve the vulnerability without introducing new issues. Reviews fix commits against original findings. Inspired by Trail of Bits methodology.
Complete security audits with 120+ checks for web applications. Covers OWASP Top 10 2025, Supabase RLS bypass attacks (40+ vectors), API enumeration, Realtime channel leaks, payment security, timing attacks, an...
Expert in Security, Audits, and Vulnerability Analysis. Use when reviewing code or designing secure flows.
Use this agent when performing security audits, vulnerability assessments, or security reviews of code. Triggers on requests like "security review", "check for vulnerabilities", "OWASP compliance check".
Test authenticated API routes in ActionPhase using JWT Bearer token authentication. Use when testing API endpoints, validating route functionality, debugging authentication issues, or verifying request/response...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。