GitHub
input-sanitization
ユーザー入力のサニタイズとセキュリティ対策を専門とするスキル。 XSS、SQLインジェクション、コマンドインジェクションなどの攻撃を防止。 Anchors: • OWASP Top 10 / 適用: インジェクション対策 / 目的: 主要脆弱性の予防...
☆ 5查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
secrets-management-gha
GitHub Actionsワークフローでの安全な秘密情報管理を実現する。 リポジトリ/環境/組織/Dependabotの4種類のシークレット使い分け、OIDCによるクラウド認証、ローテーション、監査を包括的に提供する。 Anchors: • Web Applic...
☆ 5查看技能
GitHub
rbac-implementation
ロールベースアクセス制御（RBAC）の設計と実装パターンを提供するスキル。 最小権限の原則に基づくロール体系設計、多層アクセス制御、 権限チェックロジック、ポリシーエンジン構築を支援。 Anchors: • 『Web Application S...
☆ 5查看技能
GitHub
security-audit
Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring.
☆ 5查看技能
GitHub
auditing-permission-ux
Audits notification permission request flows. Use when reviewing or improving permission prompts, settings paths, or denial handling.
☆ 5查看技能
GitHub
policyengine-api
PolicyEngine API - Flask REST service powering policyengine.org and programmatic access
☆ 5查看技能
GitHub
security-auditor
레포지토리 보안 감사 스킬. 현재 코드와 commit history를 분석하여 민감 정보 유출을 점검합니다. '보안 점검', '보안 감사', 'security audit', '민감 정보 검사' 요청 시 활성화됩니다.
☆ 5查看技能
GitHub
postgres-rls
MANDATORY when touching auth tables, tenant isolation, RLS policies, or multi-tenant database code - enforces Row Level Security best practices and catches common bypass vulnerabilities
☆ 5查看技能
GitHub
security-review
MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR for auth, input handling, API, database, or credential code
☆ 5查看技能
GitHub
http-integration-patterns
HTTP client configuration, API providers, error handling, and request/response patterns
☆ 5查看技能
GitHub
security-best-practices
iOS/tvOS security best practices including Keychain usage, certificate pinning, secure data storage, and API key protection
☆ 5查看技能
GitHub
rails-context-verification
Systematic verification of codebase context before code generation to prevent assumption bugs. Trigger keywords: context, assumptions, helpers, authentication, current_user, verify, validate context
☆ 5查看技能
GitHub
postgres-rls
MANDATORY when touching auth tables, tenant isolation, RLS policies, or multi-tenant database code - enforces Row Level Security best practices and catches common bypass vulnerabilities
☆ 5查看技能
GitHub
security-review
MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR for auth, input handling, API, database, or credential code
☆ 5查看技能
GitHub
multi-system-sso-authentication
Implement enterprise Single Sign-On (SSO) authentication supporting multiple identity providers with JWT RS256 tokens, backwards verification, session management, and cross-system permission mapping. Use this s...
☆ 5查看技能
GitHub
security-test-generator
基于NFR安全要求，生成STRIDE/OWASP威胁模型和测试场景。L3级别专用，当设计和需求确认后使用。
☆ 5查看技能
GitHub
fastapi-jwt-auth
Expert skill for implementing JWT-based authentication in FastAPI applications. Handles token generation, verification, user authentication, protected routes, and security best practices. Includes setup for pas...
☆ 5查看技能
GitHub
better-auth-jwt-jwks
Expert skill for implementing Better Auth with JWT tokens and JWKS (JSON Web Key Set) for secure authentication between Next.js frontend and FastAPI backend. Handles JWT token generation, verification, JWKS end...
☆ 5查看技能
GitHub
docusaurus-auth
Expert skill for implementing authentication in Docusaurus static sites. Handles FastAPI backend setup for authentication, JWT token management, and secure API communication. Includes setup for static site gene...
☆ 5查看技能
GitHub
authentication
Implement authentication with NextAuth v5. Use when adding login/logout, checking sessions, protecting API routes, server actions, or pages.
☆ 5查看技能
GitHub
security-report-builder
Transform plugin security scanner results into professional reports (HTML, PDF, DOCX) with intelligent false positive filtering and MITRE ATT&CK/OWASP integration. Reduces false positive rate from 85-90% to und...
☆ 5查看技能
GitHub
csrf-protection
Implement Cross-Site Request Forgery (CSRF) protection for API routes. Use this skill when you need to protect POST/PUT/DELETE endpoints, implement token validation, prevent cross-site attacks, or secure form s...
☆ 5查看技能
GitHub
security-prompts-controls
Simple security prompt templates for quick implementations using existing Secure Vibe Coding OS utilities. Use for straightforward features like contact forms, authenticated updates, and public APIs. Triggers i...
☆ 5查看技能
GitHub
authentication-authorization-vulnerabilities-ai-code
Understand authentication and authorization defects in AI-generated code including insecure password storage, broken session management, and access control bypasses. Use this skill when you need to learn about...
☆ 5查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。