rsc-security-audit
React Server Components (RSC) の利用方針とセキュリティ基準に基づき、データの安全性と疎結合性を監査します。
发现 documentation security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
React Server Components (RSC) の利用方針とセキュリティ基準に基づき、データの安全性と疎結合性を監査します。
Atomic Validation Protocol: Unified validator for Chroma Check and Librarian Audit.
Identify dangerous-but-tempting API patterns in React/Next.js/Supabase. Finds "footguns" - APIs that look safe but fail silently or have dangerous defaults. Inspired by Trail of Bits methodology.
Verify that security fixes actually resolve the vulnerability without introducing new issues. Reviews fix commits against original findings. Inspired by Trail of Bits methodology.
Complete security audits with 120+ checks for web applications. Covers OWASP Top 10 2025, Supabase RLS bypass attacks (40+ vectors), API enumeration, Realtime channel leaks, payment security, timing attacks, an...
Expert in Security, Audits, and Vulnerability Analysis. Use when reviewing code or designing secure flows.
Use this agent when performing security audits, vulnerability assessments, or security reviews of code. Triggers on requests like "security review", "check for vulnerabilities", "OWASP compliance check".
Test authenticated API routes in ActionPhase using JWT Bearer token authentication. Use when testing API endpoints, validating route functionality, debugging authentication issues, or verifying request/response...
Clerk authentication patterns and integration with Convex. Use when implementing sign-in/sign-out, protected routes, user profile sync, or role-based access control.
Guidelines for integrating Clerk authentication into the RFP Discovery application with Convex
Security audit for vulnerabilities, compliance issues, and sensitive data exposure. Use before production deployments or when reviewing security-sensitive code.
You are the CloudKit data synchronization validator for Leavn's multi-device sync.
Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data.
סיוע באבטחת אפליקציות ווב ו-APIs. השתמש כשמבקשים לאבטח פרויקט, לבדוק חולשות, להגדיר הרשאות, לנהל API keys, או להגן על נתונים. מותאם ל-Vibe Coders שעובדים עם Supabase, FastAPI, ו-Claude Code. מסביר מושגי אבטחה ב...
Enterprise-grade zero-knowledge client-side encryption implementation with Web Crypto API, PBKDF2 key derivation, AES-256-GCM encryption, and RSA-OAEP authentication for SvelteKit applications requiring maximum...
Session-based authentication, challenge-response security, and middleware patterns for Cloudflare Workers with KV storage and JWT tokens.
read this before performing Vercel operations
Personal AI Infrastructure core. AUTO-LOADS at session start. USE WHEN any session begins OR user asks about identity, response format, contacts, stack preferences, security protocols, or asset management.
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
Evaluate audit readiness of features, pages, or the overall platform. Use when the user asks to "check audit readiness", "test for auditors", "verify compliance evidence", "audit proof", or wants to ensure feat...
Governs the digital photo gallery, checkout flows, secure asset delivery, and Google Drive integrations.
Protocols for managing the Google Service Account credentials and onboarding new photographers/galleries.
Diagnose and resolve Google OAuth 'server_error' caused by credential mismatches.
Hybrid permission system - role-based + user overrides, frontend/backend patterns
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。