owasp-top-10
OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.
发现 documentation security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.
Kubernetes security policies, RBAC, and Pod Security Standards for hardened cluster deployments. Use when implementing cluster security, defining network policies, or enforcing security compliance in Kubernetes...
OWASPの基本を前提に、デフォルト安全(入力検証/認可/秘密情報/監査ログ/SSR/CSRF等)を落とさずに設計・実装・レビューする。脅威と攻撃面を洗い出し、最小権限と安全な失敗で守るために使う。
Set up Match for iOS code signing certificate management
Security controls and structured logging implementation. Use when security logging guidance is required.
Complete authentication system with Better Auth, email verification, password reset, protected routes, and account management.
Use Better Auth for client and server-side authentication. Covers session access, protected routes, sign in/out, and fetching user data.
Add user authentication using Better Auth with Drizzle ORM and Neon Postgres. Base setup with email/password authentication.
Add server-side route protection to enforce authentication on specific pages while keeping others public.
Add UI components and pages for authentication flows including sign in, sign up, forgot password, reset password, and email verification.
Create and deploy custom IOCs, YARA rules, Sigma rules, and STIX indicators for THOR scans.
Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation strategies, and compliance guidelines. Ensures appl...
Proper authentication patterns for dashboard frontend API calls. Use when adding new API endpoints, creating components that fetch data, or debugging 401 Unauthorized errors. Covers JWT token handling, the apiR...
Security patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
Use this when asked to make a cloudflare worker
Senior Security Engineer & Forensic Analyst. Expert in AI-driven vulnerability scanning, CTEM standards, and agentic security orchestration.
Security best practices for Tzurot v3 - Secret management, AI-specific security (prompt injection, PII scrubbing), Economic DoS prevention, Discord permission verification, microservices security, and supply ch...
Implement MFA login providers for Umbraco backoffice using official docs
Implement granular user permissions in Umbraco backoffice using official docs
Implement authentication providers for Umbraco backoffice using official docs
Set up OpenAPI client for authenticated API calls in Umbraco backoffice (REQUIRED for custom APIs)
Secret management integration (密鑰管理整合). Use when working with HashiCorp Vault, credential management, or secure configuration. Covers secret storage (密鑰儲存), key management (金鑰管理), NestJS integrati...
Development guide for @rytass/secret base package (密鑰基底套件開發指南). Use when creating new secret adapters (新增密鑰 adapter), understanding base interfaces, or extending secret management functionality. C...
Bitwarden Passwordless.dev documentation, SDKs, and React examples
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。