GitHub
password-reset-flow
Implement secure password reset with Rails 8's built-in token generation. Use when building "forgot password" functionality with email verification and time-limited reset tokens.
☆ 0查看技能
documentation security AI 技能
发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: documentation security
documentation security 清除筛选
全部技能
GitHub
rails8-authentication
Implement Rails 8 built-in authentication with has_secure_password, session cookies, and the Authentication concern. Use when building login/logout functionality, session-based auth, or user authentication syst...
☆ 0查看技能
GitHub
user-management
Implement user CRUD operations within an account with permission controls and feature flags. Use when building team member management, user administration, or account user settings in multi-tenant Rails applica...
☆ 0查看技能
GitHub
security-audit
Comprehensive security audit of the job analytics platform. Tests actual entry points (API, Supabase, frontend), scans for credential exposure, validates RLS policies, and generates prioritized remediation repo...
☆ 0查看技能
GitHub
workos-integration
Patterns for WorkOS SSO integration in Battery. Use this skill when implementing authentication, organization management, directory sync, or session handling.
☆ 0查看技能
GitHub
production-readiness-reviewer
Verify whether a service, feature, or contract is safe to deploy to production. Use when preparing for deployment, reviewing release candidates, or validating production configs. Triggers on "production ready",...
☆ 0查看技能
GitHub
constitution
Load and confirm core principles, guardrails, and project context for MacroFlow sessions.
☆ 0查看技能
GitHub
cross-platform-api
Verify API endpoints work across Web, Android, and iOS. Check endpoint parity, request/response format consistency, and field name alignment. Use when adding new API endpoints, fixing cross-platform bugs, or au...
☆ 0查看技能
GitHub
auth-verify
Authenticate to web app and verify session state with Chrome DevTools session sharing
☆ 0查看技能
GitHub
consent-integrate-production
Use this skill when integrating an external Go project with a production consent identity server. Triggers include setting up authentication, protecting routes with tokens, handling OAuth authorization codes, c...
☆ 0查看技能
GitHub
consent-integrate-testing
Use this skill when integrating an external Go project with consent testing utilities. Triggers include testing authenticated routes, setting up dev mode login, writing tests for authorization, using TestVerifi...
☆ 0查看技能
GitHub
handling-authentication
Handling authentication and authorization in StickerNest. Use when the user asks about login, signup, auth, session, protected routes, user context, JWT, tokens, logout, or permission checks. Covers Supabase Au...
☆ 0查看技能
GitHub
csrf-auth-debugger
Debug CSRF token issues and authentication problems including 403 Forbidden errors, cookie issues, JWT tokens, OAuth flows, and session management. Use when troubleshooting CSRF verification failed, 403 errors...
☆ 0查看技能
GitHub
security-scanning
Security scanning patterns using gitleaks, PII detection, and secret scanning. Use when writing scripts that handle sensitive data, committing code, or setting up security automation. Includes gitleaks configur...
☆ 0查看技能
GitHub
backend-api-authentication
Implement secure API authentication following industry best practices including token-based auth, OAuth2/OIDC, JWT handling, and password security. Use this skill when implementing or modifying authentication m...
☆ 0查看技能
GitHub
global--validation
Apply the Agent OS standard for global validation.
☆ 0查看技能
GitHub
global-validation
Implement comprehensive validation on server and client sides with fail-fast checks, specific error messages, input sanitization, and consistent validation across all entry points. Use this skill when validatin...
☆ 0查看技能
GitHub
web-security-standards
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
☆ 0查看技能
GitHub
permission-management
Permission validation, architecture patterns, anti-patterns, and best practices for Claude Code settings management
☆ 0查看技能
GitHub
security-audit
Audit code for security vulnerabilities using OWASP Top 10, STRIDE threat modeling, and secure coding practices. Identifies SQL injection, XSS, CSRF, auth issues, and secrets exposure. Returns prioritized findi...
☆ 0查看技能
GitHub
active-directory-skill
Active Directory 攻撃・検知に関する包括的な知識スキル。Kerberos 認証プロトコル、権限昇格、ドメイン間信頼悪用、LDAP 攻撃、Windows ログ分析による脅威検知など、AD セキュリティの多岐にわたるトピックをカバーしていま...
☆ 0查看技能
GitHub
ios-permissions-handling
iOS app permissions request and management guide. When to use: when adding camera access, microphone usage, speech recognition, photo library access, or any iOS system resource requiring user authorization. Wha...
☆ 0查看技能
GitHub
security-test-suite
Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates...
☆ 0查看技能
GitHub
better-auth
Better Auth authentication framework patterns for Next.js. Use when implementing user authentication, JWT tokens, session management, or OAuth integration for the Todo frontend.
☆ 0查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。