GitHub
mr-robot
Security and data integrity checks for org run mr robot leak and org run mr robot db requests. Use when asked to audit PII exposure, auth gaps, or database issues.
☆ 1查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
prowler-api
Prowler API patterns: JSON:API, RLS, RBAC, providers, Celery tasks. Trigger: When working in api/ on models/serializers/viewsets/filters/tasks involving tenant isolation (RLS), RBAC, JSON:API, or provider lifec...
☆ 1查看技能
GitHub
architecture-validation
Detect and validate client-authoritative vs server-authoritative architecture gaps
☆ 1查看技能
GitHub
prowler-test-api
Testing patterns for Prowler API: JSON:API, Celery tasks, RLS isolation, RBAC. Trigger: When writing tests for api/ (JSON:API requests/assertions, cross-tenant isolation, RBAC, Celery tasks, viewsets/serializer...
☆ 1查看技能
GitHub
ask-questions-if-underspecified
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
☆ 1查看技能
GitHub
api-auth-guards
Generate authentication and authorization guards (JWT, API key, roles, permissions) with tenant context validation. Use when protecting API endpoints or implementing RBAC.
☆ 1查看技能
GitHub
validate-urls
This skill should be used when the user asks to "validate external URLs", "check for link rot", "screenshot URLs", "archive external links", or wants to verify and document external web resources (http/https) r...
☆ 1查看技能
GitHub
better-auth
Add authentication with Better Auth (TypeScript). Use for email/password, OAuth providers (Google, GitHub), 2FA/MFA, passkeys/WebAuthn, sessions, RBAC, rate limiting.
☆ 1查看技能
GitHub
security-sentinel
Use when working with authentication, API routes, user input, or sensitive data. Audits code for security vulnerabilities based on OWASP Top 10. Critical for payment processing, auth systems, and data handling.
☆ 1查看技能
GitHub
codex-test-integration
Validate integration impact and regression risks via claude-delegator (Code Reviewer expert). Use for complex tasks or API integration.
☆ 0查看技能
GitHub
seo-security-guardrails
Checklists mínimos obligatorios de SEO y seguridad antes de confirmar cambios en archivos sensibles.
☆ 0查看技能
GitHub
secrets-management
Secure storage, rotation, and access control for secrets, credentials, and sensitive configuration.
☆ 0查看技能
GitHub
enterprise-rbac-models
Comprehensive guide to implementing Role-Based Access Control for enterprise applications with hierarchical roles, custom permissions, and multi-level access
☆ 0查看技能
GitHub
openapi-governance
Comprehensive guide to OpenAPI governance, API design standards, automated linting, breaking change detection, and API lifecycle management
☆ 0查看技能
GitHub
security-baseline-controls
Minimum security controls every service must implement: authentication/authorization, input validation, secrets management, security headers, dependency security, audit logging, and operational guardrails
☆ 0查看技能
GitHub
access-audit-and-reviews
Comprehensive guide to access audits, periodic reviews, anomaly detection, and segregation of duties for compliance and security.
☆ 0查看技能
GitHub
logging-redaction
Comprehensive guide to preventing PII and secrets from appearing in logs through redaction strategies, safe logging practices, and automated filtering.
☆ 0查看技能
GitHub
sso-saml-oidc
Comprehensive guide to implementing Single Sign-On with SAML 2.0 and OpenID Connect for enterprise authentication
☆ 0查看技能
GitHub
rate-limit-setup
Implement rate limiting for API endpoints. Use when user mentions "rate limit", "quota", "usage tracking", "throttle", or "limit requests".
☆ 0查看技能
GitHub
security-audit
Security vulnerability scanning and audit. Use when user needs security check, dependency updates, vulnerability scan, or says "check security", "audit code", "security vulnerabilities", "update gems", "CVE che...
☆ 0查看技能
GitHub
sso-guide
SSO integration guidance for fort-nix services. Use when adding authentication to a service, choosing an SSO mode, configuring oauth2-proxy, or troubleshooting auth issues. Triggers on fort.cluster.services sso...
☆ 0查看技能
GitHub
sdd-design-security
Design threat mitigation, input validation, and secure execution. Use when: sdd-design assigns Security Considerations section. Triggers: "security design", "threat model", "input validation", "xss prevention"
☆ 0查看技能
GitHub
npm-oidc-publishing
Set up and troubleshoot npm Trusted Publishing with OIDC in GitHub Actions. Use when configuring passwordless npm publishing, debugging ENEEDAUTH errors, or migrating from 90-day npm tokens to OIDC authenticati...
☆ 0查看技能
GitHub
security-scanner
Comprehensive security scanning for SAST, secrets, OWASP vulnerabilities, container and IaC security
☆ 0查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。