GitHub
security
Security patterns for the 3SC widget host. Covers credential storage, input validation, secure coding practices, and protecting user data.
☆ 1查看技能
tools security AI 技能
发现 tools security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: tools security
tools security 清除筛选
全部技能
GitHub
rbac-security
Role-based access control (RBAC) patterns, authentication wrappers, authorization checks, input validation with Zod schemas, security boundaries, server action security, real-time message validation, preventing...
☆ 1查看技能
GitHub
reviewing-security
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティ、脆弱性、OWASP、認証、認可、監査を依頼された時。
☆ 1查看技能
GitHub
permissions
Guide for working with team-based permissions and authorization in the WODsmith codebase. Use when touching TEAM_PERMISSIONS constants, hasTeamPermission/requireTeamPermission functions, adding permission check...
☆ 1查看技能
GitHub
security-audit
Audit system security configuration for vulnerabilities. Use when the user says "audit security", "harden server", "check security", "is my server secure", "security review", or asks about server hardening.
☆ 1查看技能
GitHub
security-expert
Expert-level application security, OWASP Top 10, penetration testing, and security best practices
☆ 1查看技能
GitHub
fnox-secrets
Manages fnox encrypted secrets for the micelio project. Use when setting up secrets, adding new environment variables, configuring deployment credentials, or troubleshooting fnox/age encryption.
☆ 1查看技能
GitHub
create-auth-skill
Skill for creating auth layers in TypeScript/JavaScript apps using Better Auth.
☆ 1查看技能
GitHub
better-auth-best-practices
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
☆ 1查看技能
GitHub
jwt-attack-surface
Audit JWT implementation for algorithm confusion, secret weakness, claim validation issues, and token handling vulnerabilities. Use when reviewing authentication systems using JWT.
☆ 1查看技能
GitHub
crypto-audit
Audit cryptographic implementations for weak algorithms, insecure defaults, predictable randomness, key management issues, and timing attacks. Use when reviewing security-critical crypto code.
☆ 1查看技能
GitHub
injection-hunter
Hunt for injection vulnerabilities including SQL injection, command injection, XSS, SSTI, path traversal, LDAP injection, and other input validation flaws. Use when auditing code that processes user input.
☆ 1查看技能
GitHub
go-security-audit
Security audit for Go backend code and SDKs. Covers Go-specific vulnerabilities, common security pitfalls, and best practices. Use when auditing Go codebases.
☆ 1查看技能
GitHub
authz-bypass-hunter
Hunt for authorization bypass vulnerabilities including IDOR, privilege escalation, missing access controls, broken object-level authorization. Use when auditing authentication/authorization code or API endpoin...
☆ 1查看技能
GitHub
dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
☆ 1查看技能
GitHub
idor-vulnerability-testing
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass...
☆ 1查看技能
GitHub
secrets-hunter
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
☆ 1查看技能
GitHub
security-review
This skill should be used when the user asks to "security review", "check for vulnerabilities", "audit security", "find security issues", "security scan", "check for injection", "find hardcoded secrets", "OWASP...
☆ 1查看技能
GitHub
security-design
Design security controls and threat mitigations. Use for features involving auth, data, or external exposure.
☆ 1查看技能
GitHub
vulnerability-analysis
Identify vulnerability class, analyze root cause, and plan exploitation strategy.
☆ 1查看技能
GitHub
security-baseline
Security requirements, threats, and controls that apply across this system.
☆ 1查看技能
GitHub
security-scanning
Scan code for security vulnerabilities. Use after implementation changes.
☆ 1查看技能
GitHub
audit-agent
Comprehensive security and code quality audit. Use for thorough security, vulnerability, and code quality analysis. Related: project-health-checker for quick diagnostic checks.
☆ 1查看技能
GitHub
project-health-checker
Quick diagnostic tool (30s) running validation and health checks. Use for fast status checks. Related: audit-agent for comprehensive security and code quality audits.
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。