Навыков: 4 624. Сортировка по числу звёзд.
API security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure pr...
Harden APIs against OWASP API Top 10 vulnerabilities.
Secure APIs as hard gate: BOLA, authn/authz, property-level authz, consumption limits, SSRF, misconfig, inventory. Ask:...
Apply the OWASP API Security Top 10 to REST and GraphQL endpoints. Covers broken object-level authorization (BOLA), mass...
审查接口认证、对象权限、租户隔离和输入处理
Systematically test REST and GraphQL APIs for the OWASP API Security Top 10 (2023) on authorized targets — object- and f...
Use when implementing API authentication, authorization, or security patterns. Covers OAuth 2.0, OIDC, JWT, API keys, ra...
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, a...
OWASP API Top 10 for HTTP, GraphQL, and gRPC endpoints: input validation, route rate limiting, mass assignment, response...
Deep API security assessment beyond surface scanning. Covers the full OWASP API Security Top 10 (2023): Broken Object Le...
Reviews REST and GraphQL APIs against the OWASP API Security Top 10:2023. Auto-invoked when reviewing OpenAPI/Swagger sp...
Audit API theo OWASP, Clean Architecture và Architecture Profile
API security automation skill for REST, GraphQL, gRPC, and WebSocket APIs. Covers OpenAPI/AsyncAPI ingestion, authentica...
Use when designing new API endpoints; Use when securing existing APIs
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and prote...
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/Graph...
Use this skill when you need evidence-bounded api-security-testing analysis and validation preparation; triggers include...
API security testing and validation for REST/GraphQL/gRPC endpoints, contract testing, load testing, fuzzing, and Postma...
通用 REST API 工具包，用于快速接入第三方服务、调试端点和构建自动化流程。
Find and attack old/shadow API versions that missed a fix — improper inventory management. Load when the API is versione...
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "...
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx d...
Reverse engineering of Android APK files. Use this skill ALWAYS whenever the user mentions APK, Android, decompile, reve...
Apply Apollo.io API security best practices. Use when securing Apollo integrations, managing API keys, or implementing s...
Review repositories, features, or diffs for exploitable application security weaknesses, including injection, authentica...
Security category index for Apple platforms. Routes to the privacy-manifests skill. General secure-storage/biometrics/AT...
Implement or audit URLSession clients, authentication, retries, cancellation, pagination, image loading, caching, and tr...
Semantic + keyword search and connection-discovery across the user's own Apple Notes via the apple-notes MCP server. Use...
OWASP Top 10 with code examples, SAST/DAST tools, dependency scanning, CSP headers, and input validation patterns. Use w...
Review application changes and architecture for concrete security defects, authorization gaps, unsafe input, private-dat...
Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source co...
Applies Kyle's adversarial review methodology to consequential outputs. Forces every recommendation, audit, plan, or cla...
Application Security Engineer role bundle for security design, testing, and code review of applications. Orchestrates ne...
Use this skill when securing web applications, preventing OWASP Top 10 vulnerabilities, implementing input validation, o...
Atua como Especialista em Segurança de Aplicações Móveis (Mobile AppSec) baseado no OWASP MASVS v2.0.0 e MASTG (Android...
Use when the user wants to audit Aptos Move smart contracts, scan Aptos-specific patterns including global storage model...
Complete guide for Arabic Audition
Complete guide for Arabic Csrf
Complete guide for Arabic Dast
Complete guide for Arabic Dlp
Complete guide for Arabic Edr
Complete guide for Arabic Iam
Complete guide for Arabic Ldap
Complete guide for Arabic Mdm
Complete guide for Arabic Mfa
Complete guide for Arabic Ntlm
Complete guide for Arabic Osint
Complete guide for Arabic Pam