Навыки: Безопасность

Use this skill when statically reviewing a Spring Security 6 service's authorization and endpoint-exposure posture — mul...

Registers or audits a JetEngine Listings callback used by Dynamic Field rendering through jet-engine/callbacks/register...

· Review product, engineering, design, and business decisions with Jekyll/Hyde lenses. Triggers: 'jekyll', 'hyde', 'deci...

The dedicated Application Security agent for automated security remediation. Verifies package and version compliance, an...

聚宽量化交易平台 - 提供A股、期货、基金数据查询，事件驱动策略回测，支持在线研究与模拟实盘。

Embody Jp Morgan - AI persona expert with integrated methodology skills

Use when preparing for Japan's Registered Information Security Specialist examination (情報処理安全確保支援士試験, SC) run by IPA — t...

Extract endpoints, secrets, and hidden routes from JavaScript files using LinkFinder, SecretFinder, JSluice, and source-...

检查 XSS、CSRF、原型污染等安全问题，支持 React/Vue/Angular

Apply a jq-style filter to transform a JSON payload

Trigger: judgment day, judgment-day, adversarial review, dual review, doble review, juzgar. Blind review with synthesis,...

Apply Juicebox security best practices. Use when securing API keys, implementing access controls, or auditing Juicebox i...

JWT implementation, token management, refresh patterns, and security.

JWT — structure, signing algorithms, refresh, security pitfalls.

JSON Web Tokens for secure transmission. Use for authentication.

Use when implementing JWT authentication in FastAPI or Python projects. Triggers for: token generation, verification mid...

Configure JWT Bearer authentication with Keycloak for affolterNET.Web.Api. Use when setting up token validation, Keycloa...

JWT authentication implementation patterns. Use when implementing login, registration, token refresh, password reset, or...

Define authentication flow using JWT between frontend and backend. This skill should be used when designing the overall...

Generate JWT authentication configuration and utilities for API security. Triggers on "create jwt config", "generate jwt...

Decode and inspect a JWT (header, claims, expiry) without verifying signature

Specializes in JSON Web Tokens (JWT) implementation, security, and optimization. Handles token creation, validation, and...

Purpose: Generate JWT verification middleware for FastAPI that validates Better Auth tokens.

Professional JWT Security Expert skill. Implement enterprise-grade web application security controls and encryption stan...

Comprehensive JWT token security testing including signature verification, expiration checks, algorithm confusion attack...

Kubernetes security assessment playbook. Use when probing an API server, kubelet, etcd, dashboard, or ingress surface fr...

Use when penetration testing Kubernetes clusters on an authorized engagement. Covers cluster enumeration, RBAC abuse, po...

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade securit...

Use when implement network segmentation; Configure pod security standards

Kubernetes security policy patterns including NetworkPolicy, RBAC, Pod Security Standards, and OPA Gatekeeper. Use when...

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade securit...

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Audits a kensaiapp pipeline skill through an artifact it produced. Spawns the blind auditor fan-out (one kensaiapp-audit...

· Administer Kali: apt, branches, metapackages, images, live USB persistence, NetHunter, wireless/GPU. Triggers: 'kali',...

Execute authorized penetration testing via Kali Linux CLI tools over SSH or Docker. Covers: information gathering, vulne...

Background knowledge about how HTTP Signatures work in ActivityPub and the Fediverse, including the signing and verifica...

Background knowledge about the OpenWebAuth (OWA) federated remote authentication protocol, based on FEP-61cf (DRAFT stat...

Run a Busabase-backed sandbox desk for scoring and triaging course-instructor ("讲师") candidates found on a recruiting-st...

Embody Ken Jeong - AI persona expert with integrated methodology skills

Generate authentic social media content in Ken's distinctive multilingual style - mixing Cantonese, English, and Traditi...

Kentucky Consumer Privacy Protection Act (KPPA) compliance. Effective January 1, 2026. Covers consumer rights, controlle...

Audits supplied sanitized Kerberos governance evidence for policy, protection, monitoring, and evidence-handling exposur...

Key Rotation Manager - Auto-activating skill for Security Advanced.Triggers on: key rotation manager, key rotation manag...

Keycloak identity and access management including realms, clients, authentication flows, themes, and user federation. Ac...

This skill should be used when the user asks to "add Keycloak authentication", "implement OIDC", "configure SSO", "valid...

KI-Folgenabschätzung (FRIA nach Art. 27 KI-VO + DSFA nach Art. 35 DSGVO) erstellen – strukturierte Aufnahme, Risikoanaly...

Complete CLI reference for Kiro Crew commands. Use for help, commands, setup, how to, what can you do, getting started,...

Security guardrails pack — injection, secrets, path traversal, auth defaults, deserialization, untrusted-content discipl...