secret-rotation-runbook
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
发现 documentation security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Rotate and validate secrets following the project runbook. Use when the user mentions secret rotation, API key changes, or credential updates.
Creates and manages Cloudflare Access service tokens for automated infrastructure verification and non-human access. Use when setting up automation, verification scripts, monitoring systems, or need to test ser...
security protocols for MCP agents. Use this to prevent Dynamic Capability Injection, Tool Shadowing, and Confused Deputy attacks when connecting to external servers.
Expert Security Engineer for PayU Digital Banking Platform - specializing in Application Security, DevSecOps, PCI-DSS compliance, and OJK regulations.
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Cl...
Enforces privacy protection patterns: anonymization, no PII in logs, secure data handling, GDPR compliance. Use when handling user data, implementing AI2AI, or ensuring privacy compliance.
セキュリティ専門家。脆弱性診断、脅威モデリング、セキュリティベストプラクティス適用を支援。使用場面: (1) セキュリティ脆弱性診断、(2) 脅威モデリング、(3) 認証・認可の設計レビュー、(4) データ保護の検証、(5) セキュ...
Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login methods (SMS, Email, WeChat Open Platform, Google, Anonymous, Username/password, OAuth, SAML,...
security protocols for agent context. Use this to implement strict data isolation, redact PII, and prevent memory poisoning or prompt injection attacks.
Includes sub-skills for OWASP Top 10 checks and ethical hacking heuristics.
Guidelines for integrating with the FraudShield Laravel backend API
Adds new users to Cloudflare Access authentication by updating ACCESS_ALLOWED_EMAIL in .env and syncing policies to all protected services. Use when you need to grant access to a new user, add someone to the ne...
Mapper field validation process ensuring zero missing fields
Use this skill when designing or reviewing systems where security is a concern - authentication, authorization, data protection, input handling, or any system processing untrusted input. Applies adversarial thi...
This skill should be used when the user asks to 'secure my API', 'implement authentication', 'configure Keycloak', 'add authorization', 'fix JWT issues', 'set up OAuth', 'review security', 'security audit', 'pe...
Comprehensive audit methodology for web applications covering accessibility (RGAA 4.1), security (OWASP Top 10), performance (Core Web Vitals), and eco-design. Use when users need guidance on audit processes, t...
Security review guidance. Use when reviewing code for security vulnerabilities, assessing authentication/authorization, or evaluating data handling.
Gate 1 validation: API specification quality checks
協助執行 PHP/Laravel 應用程式的安全性審計。當需要檢查安全漏洞、審查敏感資料處理、或評估 OWASP Top 10 風險時載入此技能。
Diagnoses and fixes Cloudflare Access authentication issues including Google OAuth errors, access denied after login, login loops, CookieMismatch errors, and "can only be used within its organization" errors. U...
Diagnoses and fixes HTTPS/SSL certificate issues in the network infrastructure by checking API tokens, validating Caddy configuration, and testing certificates. Use when certificates are not obtained, HTTPS is...
Implement secure authentication systems including signup, signin, password hashing, JWT tokens, and Better Auth integration.
How to integrate external APIs safely; how to store and query OpenAPI without polluting context.
Expert securite applicative et infrastructure - OWASP, pentest, secure coding, threat modeling. Utilise ce skill quand: (1) audit de securite applicative, (2) implementation SAST/DAST/IAST, (3) secure coding pr...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。