В каталоге 183 730 навыков в 14 категориях.
Runs an evidence-backed security audit of a code repository (secrets, dependency advisories, commit history, then a Clau...
MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest, Auth/JWT Audit, Data Encryption, Incident Response. Use for Code Sec...
WordPress security auditing and hardening. Scan for vulnerabilities, manage security settings, monitor threats, and impl...
Performs comprehensive security audits of KrakenD configurations to identify vulnerabilities, authentication gaps, and s...
Auditoría de seguridad automatizada — SAST, DAST, escaneo de dependencias, secretos, hardening de contenedores y complia...
security-auditor skill Trigger terms: security audit, vulnerability scan, OWASP, security analysis, penetration testing...
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
Comprehensive Supabase security auditor for RLS policies, table privileges (GRANTs), and access control validation. Use...
Audits repository security — hardcoded secrets, dependency vulnerabilities, environment variable management, and authent...
Security auditing checklists, vulnerability patterns, secure coding practices, and compliance guidance
Audits code for security vulnerabilities, exposed secrets, and unsafe patterns. Use when asked to "security audit", "che...
Application security agent that audits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and common security fla...
Expert in compliance frameworks (SOC2, ISO 27001), automated auditing, and risk management.
Comprehensive security and authentication workflow that orchestrates security architecture, identity management, access...
Authentication, authorization, secrets management, XSS prevention, CSRF protection, Dependabot configuration, vulnerabil...
Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR ca...
When implementing backend APIs, database queries, authentication, or handling user input.
Security requirements, threats, and controls that apply across this system.
Secure-coding baseline to apply while writing code, not just when reviewing it — input validation, auth, secrets, depend...
Install secure-development basics for non-toy repos. Use when a repo needs secret scanning, dependency vulnerability che...
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security...
มาตรฐาน security ขั้นต่ำที่ทุก service ต้องมี: authentication, authorization, input validation, secrets handling, และ se...
Essential security checklist and patterns for web applications. Use when reviewing code for security issues, implementin...
Manage security benchmark runner operations. Auto-activating skill for Security Advanced. Triggers on: security benchmar...
Security Benchmark Runner - Auto-activating skill for Security Advanced.Triggers on: security benchmark runner, security...
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the u...
Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user expli...
Expert security decisions for iOS/tvOS: when Keychain vs UserDefaults, certificate pinning trade-offs, API key protectio...
Perform language and framework specific security best-practice reviews, vulnerability detection, and secure-by-default c...
Application security specialist covering OWASP top 10, secure coding, and vulnerability prevention
Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using M...
Use when hunting for exploitable, remotely reachable vulnerabilities in a PHP/Laravel codebase for responsible disclosur...
Bun runtime security audit patterns. Load when reviewing Bun apps (bun.lockb, bunfig.toml, or bun:* imports present). Co...
Security: audits, compliance, penetration testing, secure coding. Triggers: security audit, vulnerability, penetration...
Scan Python projects for credential leaks, secrets in code, insecure patterns, LLM API key exposure, PII leakage to exte...
Faz a verificação de segurança completa do projeto - análise estática (bandit), auditoria de dependências (pip-audit, np...
セキュリティスキャン実行。gitleaks、pre-commitフック、秘密情報検出。トリガー: security, gitleaks, pre-commit, secrets, scan
Assess token and address security via the GoPlus Security API.
Terraform のセキュリティをチェックする。「セキュリティチェック」「シークレット検出」「セキュリティ監査」「tf セキュリティ」「state のシークレット」「機密情報確認」「セキュリティスキャン」「脆弱性チェック」「ハードコード検...
Security checklist to run before marking any task done
Security best practices, OWASP guidelines, and vulnerability prevention checklist. (project)
Security review checklist for features and changes
Progressive-disclosure security-depth modules for the security-reviewer. Holds boundary-keyed checklists (access-control...
Applies fixes for security findings produced by /security-review. Use when the user wants to fix security issues found b...
Run a repeatable static code review for concrete bugs, vulnerabilities, and likely-issue patterns, against the full code...
Use to translate a security finding, incident, or program update for a specific audience — board, executives, engineerin...
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industr...
Implement comprehensive security for shared library. Use when working with security audits, dependency vulnerabilities,...
Establish comprehensive security scanning and compliance infrastructure from scratch. Use when working with security aud...
| ID | sre-security-compliance-automation |
| Atributo | Valor |
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PC...
Master application security, threat mitigation, compliance frameworks, and secure authentication. Use this as a central...
Operating procedure for the kirocrew-security-conductor agent. Use when a security conductor session is seeded, inspecte...
セキュリティ関連設定のレビュー、構成監査、セキュリティベースライン確認を統一的に実施するスキル。脅威モデリングに基づいた設定評価とベストプラクティスの適用を通じて、アプリケーションのセキュリティ態勢を向上させます。Anchors:• 『We...
Use this skill whenever writing authentication middleware, file upload handlers, API endpoints, secrets access, dependen...
Convex security audit patterns. Load when reviewing Convex apps (convex/ directory present). Covers query/mutation auth,...
"RAN security coordination with threat detection, cognitive consciousness, and intelligent security management for compr...
Comprehensive application security expertise covering authentication, authorization, OWASP Top 10, and security best pra...
Security fundamentals and OWASP principles
Senior application security engineer who audits code for vulnerabilities, misconfigurations, and architectural security...
Inventory NuGet packages and Aspire-managed container/infra components, cross-reference them against OSV.dev, and assess...
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path security...
Guide for conducting comprehensive web dependency security scans to identify outdated libraries, CVEs, and security misc...
Get your security deposit back — the move-out documentation that wins disputes before they start, the itemized-deduction...
Audit portal/ hex dependencies for supply-chain risk — retired/yanked packages, known advisories, unexpected git/path de...
Design security controls and threat mitigations. Use for features involving auth, data, or external exposure.
Write specs/design/security.json when a design has sign-in, permissions, roles or test users — the permission catalog ev...
Detect infrastructure and security-critical file changes to trigger security agent review recommendations ensuring prope...
Routes an authorized Git diff security review to the original native security-diff-scan skill.
Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.
Verify whether an incoming security advisory is a real, disclosable vulnerability in a target repository checkout, and a...
Put on the security-engineer hat for emisar — threat-model and harden anything touching auth, runner trust, MCP, policie...
Security review and threat modeling. Use when attacker behavior, trust boundaries, auth, secrets, exploitability, sensit...
Plan or review project security, tool reuse, dependencies, services, integrations, permissions, secrets, supply-chain ri...
Expert application security engineer specializing in threat modeling, vulnerability assessment, secure code review, and...
Security Engineer role bundle for building security into products and infrastructure. Orchestrates code review, pipeline...
SEOcrawler security vulnerability scanner and hardening specialist covering code analysis, dependency audits, and infras...
Security-first auditing of AI-generated code — Level 1 quick checks during /toh-dev and /toh-test (hardcoded secrets, da...
威胁建模、身份会话、授权隔离、入口防护、秘密密码学、隐私、供应链、检测响应与漏洞处置。
Cross-stack security review — auditing vulnerabilities across infrastructure, smart contracts, CI/CD pipelines, and AI a...
Application security and infrastructure security expert. Use when reviewing code for vulnerabilities, implementing authe...
Comprehensive security reference for this project — not a checklist, a methodology. Covers how to threat-model new featu...
Security best practices, OWASP compliance, authentication patterns, and vulnerability prevention
セキュリティイベント機能の開発・修正を行う際に使用。イベント発行、統計データ更新、フック連携（Slack/Datadog/Webhook/SSF）の実装時に役立つ。
セキュリティイベント・フック（Security Events & Hooks）機能の開発・修正を行う際に使用。イベント通知、Slack/Email/Webhook/SSF連携実装時に役立つ。
You are a security expert for the CodeCompress MCP server. This server indexes codebases and provides AI agents with com...
This skill should be used when the user asks to 'secure my API', 'implement authentication', 'configure Keycloak', 'add...
Expert in application security, vulnerability analysis, secure coding practices, and security auditing. Use for security...
Express.js security audit patterns. Load when reviewing Express apps. Covers Helmet.js, CORS, body-parser limits, auth m...
FastAPI security audit patterns. Use when reviewing FastAPI apps (fastapi imports, main.py/app.py, requirements/pyprojec...
Acknowledge a security-review finding (code/dependency/adversarial) so it stops resurfacing as new on future runs while...
Link two or more security-review findings (possibly from different capabilities) as the same underlying issue, so the co...
This skill should be used when the user asks to "create an API endpoint", "add a view", "write a viewset", "create a ser...
Orchestrates test-driven fixes for Mattermost security tickets (Jira/Atlassian) with a Staff Security Engineer mindset:...
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary...
Sécurité Flutter. Use when reviewing security, implementing auth, or hardening code.