GitHub
input-validation-hardening
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
☆ 32查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
secrets-and-logging-hygiene
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
☆ 32查看技能
GitHub
secure-code-review
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
☆ 32查看技能
GitHub
security-audit
Security best practices including CSP, XSS prevention, input validation, and secrets management. Use when reviewing security or hardening applications.
☆ 32查看技能
GitHub
software-security-appsec
Modern application security patterns aligned with OWASP Top 10:2025 (final), OWASP API Security Top 10 (2023), NIST SSDF, zero trust (incl. NSA ZIGs 2026), supply chain security (SBOM), passkeys/WebAuthn, authe...
☆ 31查看技能
GitHub
qa-docs-coverage
Docs as QA: audit doc coverage and freshness, validate runbooks, and maintain documentation quality gates for APIs, services, events, and operational workflows. Includes AI-assisted audits, observability patter...
☆ 31查看技能
GitHub
user-investigation
Use this skill when asked to investigate a user account for security issues, suspicious activity, or compliance review. Triggers on keywords like "investigate user", "security investigation", "user investigatio...
☆ 30查看技能
GitHub
ca-policy-investigation
Use this skill when asked to investigate Conditional Access policy changes, sign-in failures related to CA policies (error codes 53000, 50074, 530032), or suspected policy bypass/manipulation. Triggers on keywo...
☆ 30查看技能
GitHub
authentication-tracing
Use this skill when asked to trace authentication flows, analyze SessionId chains, investigate token reuse vs interactive MFA, or assess geographic anomalies in sign-ins. Triggers on keywords like "trace authen...
☆ 30查看技能
GitHub
security-threat-model
Use when designing or reviewing systems handling sensitive data (PII, PHI, financial, auth credentials), building features with security implications (auth, payments, file uploads, APIs), preparing for security...
☆ 30查看技能
GitHub
security-audit
RLS validation, security audits, OWASP compliance, and vulnerability scanning. Use when validating RLS policies, auditing API routes, or scanning for security issues.
☆ 30查看技能
GitHub
security-audit
RLS validation, security audits, OWASP compliance, and vulnerability scanning. Use when validating RLS policies, auditing API routes, scanning for security issues, or reviewing code for vulnerabilities.
☆ 30查看技能
GitHub
bknd-row-level-security
Use when implementing row-level security (RLS) in Bknd. Covers filter policies, user ownership patterns, public/private records, entity-specific RLS, multi-tenant isolation, and data-level access control.
☆ 30查看技能
GitHub
bknd-password-reset
Use when implementing password reset or change functionality in a Bknd application. Covers server-side password changes, building forgot-password flows with email tokens, and security considerations.
☆ 30查看技能
GitHub
bknd-oauth-setup
Use when configuring OAuth or social login providers in a Bknd application. Covers Google OAuth, GitHub OAuth, custom OAuth providers, callback URLs, environment variables, and frontend OAuth integration.
☆ 30查看技能
GitHub
bknd-assign-permissions
Use when assigning permissions to roles in Bknd. Covers permission syntax (simple strings, extended format), permission effects (allow/deny), policies with conditions, entity-specific permissions, and fine-grai...
☆ 30查看技能
GitHub
bknd-public-vs-auth
Use when configuring public vs authenticated access in Bknd. Covers anonymous role setup, unauthenticated data access, public/private entity patterns, mixed access modes, and protecting sensitive entities while...
☆ 30查看技能
GitHub
bknd-session-handling
Use when managing user sessions in a Bknd application. Covers JWT token lifecycle, session persistence, automatic renewal, checking auth state, invalidating sessions, and handling expiration.
☆ 30查看技能
GitHub
bknd-setup-auth
Use when initializing or configuring the Bknd authentication system. Covers enabling auth, configuring password strategy, setting up JWT and cookie options, defining roles, and production security settings.
☆ 30查看技能
GitHub
bknd-create-user
Use when creating a new user account in Bknd programmatically. Covers auth.createUser() in seed functions, registration via SDK/REST API, creating users via data API, admin panel user creation, and role assignm...
☆ 30查看技能
GitHub
bknd-login-flow
Use when implementing login and logout functionality in a Bknd application. Covers SDK authentication methods, REST API endpoints, React integration, session checking, and error handling.
☆ 30查看技能
GitHub
bknd-create-role
Use when defining a new role in Bknd authorization system. Covers role properties (implicit_allow, is_default, permissions), permission assignment, role hierarchies, and common role patterns (admin, editor, vie...
☆ 30查看技能
GitHub
llm-security-audit
Comprehensive security auditing framework for LLM applications covering OWASP Top 10 for LLMs, threat modeling, penetration testing, and compliance with NIST AI RMF and ISO 42001Use when "security audit, llm pe...
☆ 30查看技能
GitHub
privacy-guardian
Security and privacy specialist for differential privacy, encryption, and complianceUse when "privacy, encryption, differential privacy, PII, GDPR, CCPA, access control, audit trail, data retention, privacy, se...
☆ 30查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。