发现 devops security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
Perform a defensive security audit for Java backend services: input validation, SSRF, deserialization risks, secrets hygiene, and authz correctness. Use before release, after incidents, or during pen-test remed...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Automate vulnerability scans.
Establish contract testing (OpenAPI + consumer-driven contracts) with compatibility gates to prevent breaking changes in microservices. Use when API evolution risks breaking consumers or when you need CI enforc...
Standardize API communication, error handling, and authentication. Use when building new API services or debugging network issues.
Automate TLS certificates, rotation, and mTLS configuration.
安全漏洞檢測與修復專家。在撰寫處理用戶輸入、認證、API 端點或敏感資料的程式碼後主動使用。檢測機密資料外洩、SSRF、注入攻擊、不安全加密和 OWASP Top 10 漏洞。
Audit Java dependencies for vulnerabilities, licenses, duplicates, and version conflicts; produce an upgrade plan with pinned versions and risk notes. Use during security review, CVE response, or upgrade sprint...
DevSecOps practices for CI/CD and infrastructure. Covers OIDC authentication, secrets management, supply chain security, container hardening, and security scanning.
API integration patterns for building robust HTTP clients, handling authentication, error handling, and rate limiting.
Design RBAC/ABAC policies and permission boundaries.
Check authentication setup, user management, and run auth-related diagnostics
Scan images and runtime for CVEs and policy violations.
Validate GDPR, SOC2, HIPAA, PCI-DSS controls and audit trails.
Generate Swagger/Redoc docs and auth guides.
Security review checklist
Security review checklist for code and infrastructure
Implement OAuth2/OIDC/JWT, MFA, SSO, and session management.
Initialize Contextium session state and verify environment
Configure rate limits, auth, transforms, caching, and load balancing.
Apply secure coding practices and identify vulnerabilities. Use this skill when handling user input, authentication, authorization, secrets, or any security-sensitive code. Covers OWASP top 10, common vulnerabi...
Integrate vaults, secret rotation, and encryption.
Generate and scan QR codes for sharing and verification
Web Security Test Planner generating systematic, prioritized security testing plans based on OWASP WSTG.
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。