GitHub
security
Production-grade security testing skill with OWASP Top 10, vulnerability scanning, penetration testing guidance, and compliance validation
☆ 2查看技能
tools security AI 技能
发现 tools security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: tools security
tools security 清除筛选
全部技能
GitHub
rfc-review
Guide OAK RFC validation with quality assessment frameworks, review rubrics, and structured feedback patterns.
☆ 2查看技能
GitHub
security
Database security, access control, and data protection
☆ 2查看技能
GitHub
spring-security
Secure Spring Boot applications - authentication, authorization, OAuth2, JWT, CORS/CSRF protection
☆ 2查看技能
GitHub
php-api
PHP API development mastery - REST, GraphQL, JWT/OAuth, OpenAPI documentation
☆ 2查看技能
GitHub
security
DevSecOps practices including secrets management, SSL/TLS, vulnerability scanning, and compliance
☆ 2查看技能
GitHub
aws-security-best-practices
Implement comprehensive AWS security controls and compliance
☆ 2查看技能
GitHub
security-auditor
Activates when user needs security review, vulnerability scanning, or secure coding guidance. Triggers on "security review", "find vulnerabilities", "is this secure", "check for injection", "security audit", "O...
☆ 2查看技能
GitHub
express-api-development
Master Express.js API development with middleware, routing, validation, authentication, and production best practices. Build scalable RESTful APIs with Express.
☆ 2查看技能
GitHub
security-documentation
Master security documentation with security policies, incident response plans, security procedures, and compliance documentation.
☆ 2查看技能
GitHub
security-assessment
Master security assessments with vulnerability scanning, penetration testing, security testing, and security audits.
☆ 2查看技能
GitHub
devsecops-lookup
Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security. Use when user asks about "DevSecOps", "SAS...
☆ 2查看技能
GitHub
form-security-analyzer
Static security analysis of HTML forms without sending any requests. Checks for CSRF tokens, insecure actions, missing validation, hidden field issues, and common security misconfigurations. Safe to run - no pa...
☆ 2查看技能
GitHub
secret-scanner
Scans git repositories for hardcoded secrets, credentials, and API keys using Gitleaks. Returns findings with severity, location, and remediation steps. Use when user asks to "scan for secrets", "detect credent...
☆ 2查看技能
GitHub
web-resource-checker
Validates essential web resource files (sitemap.xml, robots.txt, llms.txt, security.txt) for compliance with their specifications. Use when user asks about "sitemap validation", "robots.txt check", "llms.txt",...
☆ 2查看技能
GitHub
using-loaded-knowledge
MANDATORY protocol enforcing knowledge check before EVERY response - prevents explaining systems without reading docs, claiming without verification, and ignoring auto-loaded context
☆ 2查看技能
GitHub
orca-confirm
Handle team confirmation with automatic bypass mode detection for /orca
☆ 2查看技能
GitHub
auth-security-validator
Autonomous validation of authentication security. Checks password hashing, cookie configuration, CSRF protection, and session management for OWASP compliance.
☆ 2查看技能
GitHub
polar-integration-validator
Autonomous validation of Polar.sh billing integration. Checks webhook endpoints, signature verification, subscription middleware, and environment configuration.
☆ 2查看技能
GitHub
security-rbac-auth
Implement authentication, authorization, and security controls. Use for JWT handling, API key management, RBAC, OAuth integration, and security policies. Triggers on "authentication", "authorization", "JWT", "A...
☆ 2查看技能
GitHub
claude-md-auditor
Use PROACTIVELY when reviewing CLAUDE.md configurations, onboarding new projects, or before committing memory file changes. Validates against official Anthropic documentation, community best practices, and LLM...
☆ 2查看技能
GitHub
authentication-logic
Guide to using Better Auth for client and server-side authentication.
☆ 2查看技能
GitHub
better-auth
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google,...
☆ 2查看技能
GitHub
stix2-validator
Validate STIX 2.1 JSON files and bundles against the STIX specification. Use when validating threat intelligence data, checking STIX bundle integrity before ingestion, verifying indicator/malware/attack-pattern...
☆ 2查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。