consult-security-specialist
Expert on Application Security, Credential Management, and OAuth flows.
发现 documentation security 相关 Skills,比较来源仓库和用途,查看适合你工作流的技能说明。
Expert on Application Security, Credential Management, and OAuth flows.
Designs audit trails and security telemetry for fast detection and response, aligned with OWASP Logging Cheat Sheet.
Supabase security and performance guidelines with Clerk authentication integration. Contains 40+ rules across 10 categories covering RLS policies, Clerk setup, database security, and more.
Detect PII, mask data, and manage consent and encryption.
Scans for security vulnerabilities in Next.js + TS code/plans. Invoked by prompt-classifier in IMPLEMENT/EDIT sequences via "security-overseer ". Enforces auth, input validation, secret handling, OWASP complian...
Audit de sécurité du code. Analyse OWASP Top 10, dépendances vulnérables, secrets exposés, et configurations. Utiliser après l'implémentation ou avant une release.
Audit NutriProfile code for security vulnerabilities. Use this skill when reviewing authentication, authorization, data validation, API security, or RGPD compliance. Covers OWASP Top 10 and European data protec...
Security review and pragmatic threat modeling for endpoints, authentication, sensitive data, and integrations. Use when there is user input, authentication, sensitive data handling, or payments.
Perform a defensive security audit for Java backend services: input validation, SSRF, deserialization risks, secrets hygiene, and authz correctness. Use before release, after incidents, or during pen-test remed...
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Automate vulnerability scans.
Establish contract testing (OpenAPI + consumer-driven contracts) with compatibility gates to prevent breaking changes in microservices. Use when API evolution risks breaking consumers or when you need CI enforc...
Standardize API communication, error handling, and authentication. Use when building new API services or debugging network issues.
Automate TLS certificates, rotation, and mTLS configuration.
安全漏洞檢測與修復專家。在撰寫處理用戶輸入、認證、API 端點或敏感資料的程式碼後主動使用。檢測機密資料外洩、SSRF、注入攻擊、不安全加密和 OWASP Top 10 漏洞。
Audit Java dependencies for vulnerabilities, licenses, duplicates, and version conflicts; produce an upgrade plan with pinned versions and risk notes. Use during security review, CVE response, or upgrade sprint...
DevSecOps practices for CI/CD and infrastructure. Covers OIDC authentication, secrets management, supply chain security, container hardening, and security scanning.
API integration patterns for building robust HTTP clients, handling authentication, error handling, and rate limiting.
Design RBAC/ABAC policies and permission boundaries.
Check authentication setup, user management, and run auth-related diagnostics
Scan images and runtime for CVEs and policy violations.
Validate GDPR, SOC2, HIPAA, PCI-DSS controls and audit trails.
Generate Swagger/Redoc docs and auth guides.
Security review checklist
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。