GitHub
security-audit
Perform automated security analysis on code changes to identify common vulnerabilities including SQL injection, path traversal, hardcoded secrets, XSS, and insecure API usage. Reviews Python code for OWASP Top...
☆ 1查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
microservice-auth
IOE-DREAM微服务认证架构规范。涵盖Gateway集中认证(JWT验证、Token黑名单)、业务层授权(@PermissionCheck注解)、Spring Security依赖管理(业务服务排除)、Gateway身份头转发(X-User-Id等HTTP头)、RBAC规则引擎。使用时机:实现...
☆ 1查看技能
GitHub
nrpg-workflow
Use when working on NRPG Platform tasks to follow repo conventions (NextAuth cookie sessions, tenant safety, and contractor privacy) and to run the correct checks.
☆ 1查看技能
GitHub
eridu-authentication-authorization-frontend
Provides frontend-specific authentication and authorization implementation patterns for React applications. This skill should be used when implementing login flows, protecting routes, storing tokens securely, m...
☆ 1查看技能
GitHub
eridu-authentication-authorization-backend
Provides backend-specific authentication and authorization implementation patterns for NestJS/TypeScript servers. This skill should be used when implementing JWT validation, role-based access control, API key g...
☆ 1查看技能
GitHub
eridu-authentication-authorization
Provides general authentication and authorization principles for designing secure systems. This skill should be used when implementing login flows, protecting endpoints, enforcing permissions, or designing API...
☆ 1查看技能
GitHub
middleware-patterns
Next.js middleware patterns for protected routes, auth redirects, and URL handling. Use when working with middleware.ts, protected routes, or auth redirects. Keywords: middleware, protected routes, redirect, au...
☆ 1查看技能
GitHub
auth-patterns
Supabase authentication patterns including getUser vs getSession, deadlock avoidance, session handling, and bypass patterns. Use when working with auth, sessions, cookies, or encountering auth hangs/timeouts. K...
☆ 1查看技能
GitHub
adynato-web-api
Web API development conventions for Adynato projects. Covers API routes, middleware, authentication, error handling, validation, and response formats for Next.js and Node.js backends. Use when building or modif...
☆ 1查看技能
GitHub
security-baseline
Audit and implement security best practices for GitHub repositories. USE THIS SKILL when user says "security audit", "check security", "add gitleaks", "secret scanning", "dependency audit", or needs security ha...
☆ 1查看技能
GitHub
verification-mode
Verification mode that stops and analyzes on failures, workarounds, or resolution issues
☆ 1查看技能
GitHub
permission-web-access
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
☆ 1查看技能
GitHub
tools-permission-sync
Synchronize marketplace permissions - generate wildcards, manage executor permissions, and migrate to executor pattern.
☆ 1查看技能
GitHub
permission-doctor
Diagnose permission issues across settings files (read-only analysis)
☆ 1查看技能
GitHub
security
Reviews code for security vulnerabilities, identifies security issues, suggests improvements
☆ 1查看技能
GitHub
security
Shared security framework across all phases. Security principles, requirements, architecture, testing, operations, and compliance integration. Warm, story-driven Expert Mentor style for 2026.
☆ 1查看技能
GitHub
security-audit
Perform security audits detecting OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations. Use when auditing applications for security vulnerabilities.
☆ 1查看技能
GitHub
wa-security-review
Conduct a focused security audit based on the Well-Architected Framework Security pillar. Use when user says "security review", "wa security", or "security audit". Analyzes authentication, authorization, data p...
☆ 1查看技能
GitHub
context-security-resolver
Authentication, authorization, Clerk integration, RLS policies, and security patterns. Use when working with security-resolver code, files, or integration. Invoke when navigating security-resolver codebase, sea...
☆ 1查看技能
GitHub
compare-api-versions
Compare OpenAPI versions for Terraform provider updates
☆ 1查看技能
GitHub
databricks-apps-cookie-auth
Guide for authenticating with Databricks Apps using cookie-based auth when OAuth/PAT tokens don't work. Use when connecting to Databricks Apps with User Authorization enabled.
☆ 1查看技能
GitHub
web-fuzzing
Web application security testing using fuzzing techniques to discover vulnerabilities, injection points, and edge cases
☆ 1查看技能
GitHub
remote-bridge
Remote 요청 브릿지 스킬. Use when (1) 원격 상태 확인, (2) 대기 중인 요청 조회, (3) 수동 권한 승인/거부.
☆ 1查看技能
GitHub
astro-blog-validate
Phase 5 - Validation checks before publishing
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。