GitHub
clerk-auth-proxy
Implement Clerk authentication with Next.js 16 proxy pattern, session claims, onboarding gates, and user metadata management. Use when working with authentication, authorization, or user session management.
☆ 1查看技能
tools security AI 技能
发现 tools security 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: tools security
tools security 清除筛选
全部技能
GitHub
building-mcp-servers
Use when building MCP servers in TypeScript, Python, or C#; when implementing tools, resources, or prompts; when configuring Streamable HTTP transport; when migrating from SSE; when adding OAuth authentication;...
☆ 1查看技能
GitHub
reviewing-casbin
Review Go code using Casbin authorization for security issues, model correctness, policy design, and common anti-patterns. Use when reviewing PRs with Casbin code or auditing authorization implementations.
☆ 1查看技能
GitHub
implementing-casbin
Implement role-based (RBAC) and attribute-based (ABAC) access control in Go using Casbin. Covers model configuration, GORM adapters, Chi/gRPC middleware, and production patterns. Use when implementing authoriza...
☆ 1查看技能
GitHub
security-scan
⚠️ MANDATORY - Automatically invoked by safe-commit. Performs comprehensive security scanning before commits. Checks for secrets (API keys, passwords, tokens), dependency vulnerabilities, code injection risks,...
☆ 1查看技能
GitHub
security-lens
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full security audit.
☆ 1查看技能
GitHub
security-audit
Perform automated security analysis on code changes to identify common vulnerabilities including SQL injection, path traversal, hardcoded secrets, XSS, and insecure API usage. Reviews Python code for OWASP Top...
☆ 1查看技能
GitHub
microservice-auth
IOE-DREAM微服务认证架构规范。涵盖Gateway集中认证(JWT验证、Token黑名单)、业务层授权(@PermissionCheck注解)、Spring Security依赖管理(业务服务排除)、Gateway身份头转发(X-User-Id等HTTP头)、RBAC规则引擎。使用时机:实现...
☆ 1查看技能
GitHub
nrpg-workflow
Use when working on NRPG Platform tasks to follow repo conventions (NextAuth cookie sessions, tenant safety, and contractor privacy) and to run the correct checks.
☆ 1查看技能
GitHub
eridu-authentication-authorization-frontend
Provides frontend-specific authentication and authorization implementation patterns for React applications. This skill should be used when implementing login flows, protecting routes, storing tokens securely, m...
☆ 1查看技能
GitHub
eridu-authentication-authorization-backend
Provides backend-specific authentication and authorization implementation patterns for NestJS/TypeScript servers. This skill should be used when implementing JWT validation, role-based access control, API key g...
☆ 1查看技能
GitHub
eridu-authentication-authorization
Provides general authentication and authorization principles for designing secure systems. This skill should be used when implementing login flows, protecting endpoints, enforcing permissions, or designing API...
☆ 1查看技能
GitHub
middleware-patterns
Next.js middleware patterns for protected routes, auth redirects, and URL handling. Use when working with middleware.ts, protected routes, or auth redirects. Keywords: middleware, protected routes, redirect, au...
☆ 1查看技能
GitHub
auth-patterns
Supabase authentication patterns including getUser vs getSession, deadlock avoidance, session handling, and bypass patterns. Use when working with auth, sessions, cookies, or encountering auth hangs/timeouts. K...
☆ 1查看技能
GitHub
adynato-web-api
Web API development conventions for Adynato projects. Covers API routes, middleware, authentication, error handling, validation, and response formats for Next.js and Node.js backends. Use when building or modif...
☆ 1查看技能
GitHub
security-baseline
Audit and implement security best practices for GitHub repositories. USE THIS SKILL when user says "security audit", "check security", "add gitleaks", "secret scanning", "dependency audit", or needs security ha...
☆ 1查看技能
GitHub
verification-mode
Verification mode that stops and analyzes on failures, workarounds, or resolution issues
☆ 1查看技能
GitHub
permission-web-access
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
☆ 1查看技能
GitHub
tools-permission-sync
Synchronize marketplace permissions - generate wildcards, manage executor permissions, and migrate to executor pattern.
☆ 1查看技能
GitHub
permission-doctor
Diagnose permission issues across settings files (read-only analysis)
☆ 1查看技能
GitHub
security
Reviews code for security vulnerabilities, identifies security issues, suggests improvements
☆ 1查看技能
GitHub
security
Shared security framework across all phases. Security principles, requirements, architecture, testing, operations, and compliance integration. Warm, story-driven Expert Mentor style for 2026.
☆ 1查看技能
GitHub
security-audit
Perform security audits detecting OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations. Use when auditing applications for security vulnerabilities.
☆ 1查看技能
GitHub
wa-security-review
Conduct a focused security audit based on the Well-Architected Framework Security pillar. Use when user says "security review", "wa security", or "security audit". Analyzes authentication, authorization, data p...
☆ 1查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。