GitHub
vulnerability-assessment
漏洞评估的专业技能和方法论
☆ 799查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 783查看技能
GitHub
moai-platform-firebase-auth
Firebase Authentication specialist covering Google ecosystem, social auth, phone auth, and mobile-first patterns. Use when building Firebase-backed or Google ecosystem apps, implementing social login, or adding...
☆ 659查看技能
GitHub
moai-platform-clerk
Clerk modern authentication specialist covering WebAuthn, passkeys, passwordless, and beautiful UI components. Use when implementing modern auth with great UX.
☆ 659查看技能
GitHub
moai-platform-convex
Convex real-time backend specialist covering TypeScript-first reactive patterns, optimistic updates, server functions, and file storage. Use when building real-time collaborative apps, implementing reactive que...
☆ 659查看技能
GitHub
moai-platform-auth0
Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses...
☆ 659查看技能
GitHub
onvifscan
ONVIF device security scanner for testing authentication and brute-forcing credentials. Use when you need to assess security of IP cameras or ONVIF-enabled devices.
☆ 651查看技能
GitHub
wsdiscovery
WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.
☆ 651查看技能
GitHub
ai-truthfulness-enforcer
MANDATORY verification system that prevents Claude Code instances from making false claims or fabricating evidence. Enforces cryptographic verification, real testing evidence, and automatic claim validation bef...
☆ 639查看技能
GitHub
google-calendar-sync
Wizard to set up Google Calendar API integration with service account authentication. Use when setting up calendar sync, Google Calendar API, service accounts, or domain-wide delegation.
☆ 625查看技能
GitHub
google-calendar-sync
Wizard to set up Google Calendar API integration with service account authentication and domain-wide delegation
☆ 625查看技能
GitHub
github-oauth-nango-integration
Use when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user login and repo access with webhook handling
☆ 553查看技能
GitHub
security-auditor
Continuous security vulnerability scanning for OWASP Top 10, common vulnerabilities, and insecure patterns. Use when reviewing code, before deployments, or on file changes. Scans for SQL injection, XSS, secrets...
☆ 548查看技能
GitHub
endpoint-validator
Валидация REST API эндпоинтов на соответствие OpenAPI схеме и консистентность параметров. Использовать при реализации эндпоинтов, ревью кода или перед слиянием изменений API.
☆ 510查看技能
GitHub
auth-token-manager
Получение валидных JWT Bearer токенов для аутентификации MikoPBX REST API v3. Использовать когда нужно тестировать API эндпоинты, отлаживать проблемы аутентификации или при возникновении ошибок 401 Unauthorized...
☆ 510查看技能
GitHub
credentials
Centralized API key management from Access.txt
☆ 481查看技能
GitHub
security
OWASP security patterns, secrets management, security testing
☆ 481查看技能
GitHub
axiom-privacy-ux
Use when implementing privacy manifests, requesting permissions, App Tracking Transparency UX, or preparing Privacy Nutrition Labels - covers just-in-time permission requests, tracking domain management, and Re...
☆ 456查看技能
GitHub
software-security
A software security skill that integrates with Project CodeGuard to help AI coding agents write secure code and prevent common vulnerabilities. Use this skill when writing, reviewing, or modifying code to ensur...
☆ 388查看技能
GitHub
authentication-flow
Implements authentication using Rails 8 built-in generator. Use when setting up user authentication, login/logout, session management, password reset flows, or securing controllers.
☆ 381查看技能
GitHub
authorization-pundit
Implements policy-based authorization with Pundit for resource access control. Use when adding authorization rules, checking permissions, restricting actions, role-based access, or when user mentions Pundit, po...
☆ 381查看技能
GitHub
damage-control
Install, configure, and manage the Claude Code Damage Control security hooks system. Use when user mentions damage control, security hooks, protected paths, blocked commands, install security, or modify protect...
☆ 369查看技能
GitHub
auth-bypass
认证绕过漏洞检测与利用。当目标存在登录功能、权限控制、JWT/Session 认证时使用。包括 IDOR、越权访问等。
☆ 359查看技能
GitHub
ssrf
服务端请求伪造漏洞检测与利用。当目标存在 URL 参数、远程文件加载、Webhook、PDF 生成、URL 预览功能时使用。
☆ 359查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。