GitHub
astro-security
Security patterns for Astro lead generation websites on Cloudflare. Forms, headers, bot protection, GDPR. Use for any production lead gen site.
☆ 1查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
security-review
Identify security vulnerabilities, performance issues, and code quality problems through systematic analysis adapted to project's technology stack and domain. Use when reviewing code, assessing security, auditi...
☆ 1查看技能
GitHub
auth-provider
认证提供商统一接口，支持 Supabase Auth、Clerk、Firebase Auth 等主流认证服务。 提供用户注册、登录、OAuth、会话管理、权限验证等功能。
☆ 1查看技能
GitHub
nsforge-verification-suite
驗證工具組合。觸發詞：驗證, verify, check, 維度, dimension。
☆ 1查看技能
GitHub
ethics
Ethics & Compliance Officer auditing for privacy, bias, and dark patterns.
☆ 1查看技能
GitHub
security
Senior Security Auditor using OWASP Top 10 to identify vulnerabilities.
☆ 1查看技能
GitHub
api-design
Build production-ready HTTP APIs with clean handlers, consistent error envelopes, health checks, CORS, and operational excellence.
☆ 1查看技能
GitHub
config-management
Validate config at startup, secrets in memory only. Never read config during requests, never store secrets in env vars. Use node-env-resolver for multi-source config.
☆ 1查看技能
GitHub
workflow-security-review
Guide for reviewing GitHub Actions for security vulnerabilities.
☆ 1查看技能
GitHub
nextjs-middleware
When you need to run code before a request completes: auth checks, redirects, headers, A/B testing. **Version Context**: Next.js 16.0+ uses `proxy.ts` (replaces `middleware.ts` from v15 and earlier).
☆ 1查看技能
GitHub
api-authentication
Apply when implementing API authentication: JWT tokens, session management, API keys, and auth middleware. Follows JWT Best Current Practices (RFC 8725).
☆ 1查看技能
GitHub
supabase-auth
Apply when implementing authentication: sign up, sign in, OAuth providers, session management, and protected routes.
☆ 1查看技能
GitHub
auditing-python-security
Audits Python libraries for security vulnerabilities using Bandit, pip-audit, Semgrep, and detect-secrets. Identifies SQL injection, command injection, hardcoded credentials, weak cryptography, and insecure des...
☆ 1查看技能
GitHub
zod
A Zod v4 validation specialist.
☆ 1查看技能
GitHub
auditing-plugins
Comprehensive plugin auditing for compliance with marketplace best practices. MUST Use when validating, refactoring, or improving plugin quality. Do not use for creating new plugins, scaffolding components, or...
☆ 1查看技能
GitHub
security-review
Security audit checklist and best practices for bCommGuard WhatsApp bot
☆ 1查看技能
GitHub
security-advisor
Security Advisor for vulnerability analysis and risk assessment. Reviews code and architecture for security issues. Use this skill for security review, vulnerability assessment, or risk analysis.
☆ 1查看技能
GitHub
detection
Security detection use cases for identifying threats across network, endpoint, identity, cloud, application, and email vectors. Use for building detection rules, analyzing security events, and threat hunting op...
☆ 1查看技能
GitHub
grc
Governance, Risk, and Compliance documentation and assessment support. Generate policies, assess controls, and track compliance status. Use for GRC programs, audits, and regulatory compliance.
☆ 1查看技能
GitHub
pentest-toolkit
AI-Powered Security Testing Toolkit - Professional penetration testing scripts for discovering vulnerabilities, analyzing application structure, and generating context-aware security tests. All scripts return s...
☆ 1查看技能
GitHub
api-testing
Test and debug Next.js API routes, validate responses, check authentication, and troubleshoot API errors. Use when testing API endpoints, debugging 500 errors, validating API responses, or checking authenticati...
☆ 1查看技能
GitHub
secrets-guard
Claude Codeで秘密情報を安全に管理するための多層防御アプローチガイド。APIトークン、DB認証情報、SSH鍵などを保護する3層防御戦略（物理的分離 + deny設定 + PreToolUse Hook）。
☆ 1查看技能
GitHub
health-checks
Post-deployment validation and health check scripts for validating HTTP endpoints, APIs, MCP servers, SSL/TLS certificates, and performance metrics. Use when deploying applications, validating deployments, test...
☆ 1查看技能
GitHub
security-validation
Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and output validation for AI agents. Use when validating user input, scanning for secrets, detectin...
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。