发现 documentation security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
Configure Supabase authentication with single callback URL pattern. Covers redirect URLs, auth flow types (recovery, signup, email_change), and the type parameter routing pattern. Triggers: supabase auth, auth...
Django rate limiting patterns using django-ratelimit with Redis backend for protecting views from abuse and spam. Trigger: When implementing rate limiting, spam protection, or throttling in Django views.
Perform comprehensive security audits of Java code against OWASP Top 10 and best practices. Use when auditing security, checking for vulnerabilities, analyzing SQL injection risks, preventing XSS attacks, revie...
Validate tenant isolation and RLS safety checks. Use when the user mentions tenant isolation, RLS validation, or multi-tenant access checks.
The 12 critical OpenAPI rules that cause immediate task failure if violated
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Build AWS SES email features with reCAPTCHA v3, Zod validation, XSS sanitisation, and rate limiting. Uses placeholders until env vars added to Vercel. Dual emails (owner + customer confirmation). Triggers: cont...
Validate RLS policies and role-based access. Use when the user mentions RLS testing, role access checks, or permissions validation.
Guides security validation checklist: Signal protocol security, encryption standards, authentication patterns, data protection. Use when validating security, reviewing security implementations, or ensuring secu...
Grants agents the instructions to run safety-checked penetration tests on cloud environments.
OAuth 2.0, JWT, and Auth0 integration for authentication and authorization. Implements RBAC, credential management, security auditing, and production-ready auth patterns with MCP integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Configures Cloudflare Access authentication with Google OAuth for protected services. Use when you need to set up authentication, configure Google OAuth, protect services with Cloudflare Access, enable remote a...
Lightweight validation for setup/configuration verification, workflow testing, and MCP connectivity checks. Applies to ~10 roadmap tasks requiring test execution, verification, or import/activation validation.
Security standards for credential handling and authentication
Validate profile files against the schema and OpenAPI operations. Use when creating or changing profiles or when validation errors appear.
This skill should be used when the user asks to 'configure Keycloak', 'set up ABAC', 'create Keycloak realm', 'integrate Azure AD with Keycloak', 'implement authorization services', 'configure OIDC client', 'cr...
Managing OpenCode sessions and context
Monitors and sanitizes all inputs to ensure zero storage of PHI, PII, or proprietary study secrets.
Assess system designs, data flows, and controls for security vulnerabilities and compliance. Use when performing threat modeling, penetration assessments, or policy alignment (Zero-Trust, Duke Verified) on pilo...
A strict security and implementation guide for Better Auth, focusing on schema extension for user profiles and seamless Express.js integration.
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Guide for ensuring application security. Use when reviewing code for vulnerabilities, validating inputs, or checking permissions.
Manages SSL certificate operations including checking expiry, monitoring renewal, forcing manual renewal, and backing up certificates. Use when checking certificate validity, monitoring auto-renewal, certificat...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。