GitHub
security
Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT, secrets, API keys, SQL injection, XSS, CSRF, RLS, security audit, pen testing basics.
☆ 1查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
authentication-authorization
Authentication and authorization patterns using Clerk and RBAC
☆ 1查看技能
GitHub
workos-manager
Complete WorkOS authentication management including OAuth, SSO, SCIM, email templates, domain verification, and user management. Use for enterprise auth configuration.
☆ 1查看技能
GitHub
env-update-secrets
Use when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machine
☆ 1查看技能
GitHub
reviewing-security
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティレビュー、脆弱性チェック、バージョン管理確認を依頼された時。
☆ 1查看技能
GitHub
security-review-skill
セキュリティレビュースキル。OWASP Top 10に基づくセキュリティ脆弱性のチェック。SQLインジェクション、XSS、認証・認可、暗号化などの観点でコードをレビュー。「セキュリティレビュー」「脆弱性チェック」「セキュリティ確...
☆ 1查看技能
GitHub
drift
Detect configuration drift using hash-based verification
☆ 1查看技能
GitHub
security-scan
Perform comprehensive security analysis to identify vulnerabilities. Integrates with codex-review for automatic security checks. Covers OWASP Top 10, common vulnerabilities, and secure coding practices. Output:...
☆ 1查看技能
GitHub
security-check-config
檢查應用程式的安全配置，包括 HTTPS、CORS、Security Headers、Cookie 等
☆ 1查看技能
GitHub
security-check-secrets
掃描程式碼和配置檔中的敏感資料洩漏，包括 API Keys、密碼、Token 等
☆ 1查看技能
GitHub
security-fast-scan
執行完整的應用程式安全掃描，檢查 OWASP Top 10 漏洞、敏感資料洩漏、依賴套件漏洞和安全配置問題。
☆ 1查看技能
GitHub
security-deep-review
深度程式碼安全審查，檢測注入攻擊、XSS、CSRF、身份驗證和授權問題
☆ 1查看技能
GitHub
backend-safeguard
Supabase schema validation, RLS enforcement, and API security best practices.
☆ 1查看技能
GitHub
draconian-rls-audit
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
☆ 1查看技能
GitHub
security-audit
Checklist for security-sensitive coding, ensuring MaiHouses guards and policies are respected.
☆ 1查看技能
GitHub
explain
Explain and validate what was implemented in the current session.
☆ 1查看技能
GitHub
qa-security-scan
Security scanning templates and checklists for OWASP Top 10, authentication, authorization, data protection. Use when conducting security testing or vulnerability assessment. This skill provides comprehensive...
☆ 1查看技能
GitHub
azure-role-selector
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how...
☆ 1查看技能
GitHub
clerk-auth-proxy
Implement Clerk authentication with Next.js 16 proxy pattern, session claims, onboarding gates, and user metadata management. Use when working with authentication, authorization, or user session management.
☆ 1查看技能
GitHub
building-mcp-servers
Use when building MCP servers in TypeScript, Python, or C#; when implementing tools, resources, or prompts; when configuring Streamable HTTP transport; when migrating from SSE; when adding OAuth authentication;...
☆ 1查看技能
GitHub
reviewing-casbin
Review Go code using Casbin authorization for security issues, model correctness, policy design, and common anti-patterns. Use when reviewing PRs with Casbin code or auditing authorization implementations.
☆ 1查看技能
GitHub
implementing-casbin
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns. Use when implementing authoriza...
☆ 1查看技能
GitHub
security-scan
⚠️ MANDATORY - Automatically invoked by safe-commit. Performs comprehensive security scanning before commits. Checks for secrets (API keys, passwords, tokens), dependency vulnerabilities, code injection risks,...
☆ 1查看技能
GitHub
security-lens
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full security audit.
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。