发现 tools security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
Use this skill whenever the user wants to design, implement, or refactor authentication and authorization in a NestJS TypeScript backend, including JWT, sessions, refresh tokens, guards, roles/permissions, and...
Use this skill whenever the user wants to harden security for Cloudflare Workers/Pages APIs (e.g. Hono + TypeScript), including WAF-style protections, rate limiting, IP restrictions, secrets handling, and secur...
Use this skill whenever the user wants to design, implement, or refactor authentication and authorization in a Hono + TypeScript backend, including JWT, sessions/cookies, middleware, guards-like patterns, and r...
Complete Wasp authentication setup and user management. Use when implementing auth, setting up login/signup, or working with user authentication. Includes minimal User model, auth configuration, helper function...
Multi-tenant permission checking for Wasp applications. Use when implementing authorization, access control, or role-based permissions. Includes organization/department/role patterns and permission helper funct...
Security patterns for input validation, PII protection, and cryptographic operations
Systematic approach to identifying security vulnerabilities in code, dependencies, and infrastructure
Enforce web security and avoid security vulnerabilities
Triggers for authentication, payments, user input, and API endpoints to check OWASP risks. Auto-evaluates security need and provides actionable fixes, not checklists.
Run security review workflow. Uses security, data-privacy-compliance; invokes @reviewer *review (security) and @ops *audit-security.
Security scanning, compliance checks, deployment automation, and infrastructure management. Use for security audits, compliance validation, and deployment planning.
Security scanning, compliance checks, deployment automation, and infrastructure management. Use for security audits, compliance validation, and deployment planning.
Security review of application code, dependencies, configurations, and architecture. Covers OWASP Top 10, dependency scanning, secret management, authentication patterns, and API security. Use this skill when r...
Run a single-session security audit on the codebase
Complete verification steps before ending the session
Complete verification steps before starting any work session
Visual inspection and code review for Web Interface Guidelines compliance. Triggers on "review my UI", "check accessibility", "audit design", "review UX", "fix the layout", "find design problems". Supports both...
Decrypt MCP tokens for remote sessions
Governance and guardrails for automation/bots: permissions, logging, kill-switches, and ethics. Use before deploying bots that move funds or post publicly.
Baseline security checklist for Solana programs: authority checks, input validation, upgrade keys, unsafe patterns, and attack surfaces. Use for design reviews and pre-deploy audits.
Evaluate and configure SPL token authorities (mint/freeze/close) with risk implications and best practices. Use for audits, rotations, or disclosures.
Secure Solana frontends against phishing, bad prompts, and unsafe signing requests. Use for audits of wallet UX and dApp sites.
Build Better Auth integrations for TS/JS apps with secure defaults. Use this when bootstrapping auth, migrating existing auth, or adding new auth features.
Automated security audit workflow for pre-deployment verification. Triggers when user requests security checks, vulnerability scanning, or pre-deployment audits. Use for identifying OWASP Top 10 vulnerabilities...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。