security-review
Security audit guidelines covering OWASP Top 10 vulnerabilities, secure coding practices, authentication patterns, and code review checklists
发现 devops security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Security audit guidelines covering OWASP Top 10 vulnerabilities, secure coding practices, authentication patterns, and code review checklists
Managing OpenCode sessions and context
deduplicates within request
Authentication, RBAC, and Hardening standards.
Penetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.
Prevent secret leakage and implement robust error monitoring.
Audit OWASP Top 10, dependencies, secrets, and CVE exposure.
Authentication, authorization, and security patterns for MuebleriaIris ERP. Trigger: When implementing authentication, JWT, sessions, RBAC, or security features.
Setup Interactor platform authentication with OAuth client credentials. Use when integrating with Interactor for credential management, AI agents, or workflows. Covers account registration, OAuth client creatio...
Implement OAuth flows and manage credentials for external services (Google, Slack, Salesforce, etc.) through Interactor. Use when connecting users to third-party services, handling OAuth authorization, retrievi...
Comprehensive audit of Expo/React Native app API integration layer. Use when asked to: (1) Review API interactions, auth handling, or token management, (2) Find hardcoded data or screens bypassing API, (3) Veri...
Build custom sign-in and sign-up authentication flows with Clerk's useSignIn and useSignUp hooks. Use this skill when the user asks to build sign-in or sign-up flows using Clerk, or when JavaScript/TypeScript f...
Atlassian CLI tool installation and authentication.
Inspire team security guidelines and secrets management. Use when handling sensitive data, authentication, or security reviews.
Authentication and access control skill for Next.js 15 + Supabase applications. Use when implementing user authentication, protecting routes, managing user sessions, enforcing role-based access control (admin/m...
Automated compliance evidence collection for AWS, GCP, and Azure with SOC 2, ISO 27001, NIST 800-53, and CIS benchmark mappings.
Review security of command execution, tool permissions, and API key handling. Use when user mentions "security review", "audit", "check security", "vulnerabilities", or before deploying to production.
Secure management of environment variables and secrets across ACT projects. Use for secret audits, rotation, setup, sync, and security scans.
Map threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, GDPR. Generates compliance reports with coverage percentages and gaps. Use when checking compliance status, mapping to...
Orval APIクライアント生成スキル(OpenAPI仕様書から型安全なAPIクライアントを自動生成)
Automated code review analyzing security, performance, maintainability, and test coverage. Activated during code reviews or when conducting analysis.
Reviews code against learning-infra project standards for architecture compliance, code quality, tenant isolation, and test coverage. Reviews for REST API patterns, provisioning workflows, and infrastructure be...
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debug...
This skill should be used when the user asks to "store credentials", "secure API keys", "save SSH keys", "manage secrets", "prevent credential leaks", "encrypt tokens", or mentions system keychain, credential v...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。