36,869 skills sorted by stars.
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS,...
セキュアな開発・運用のための実装指針、機密情報管理、通信の確保、入力値検証、依存ライブラリ管理のガイドラインを定義する。セキュリティ実装時、認証・認可実装時、API開発時、またはユーザーがセキュリティ、機密情報、暗号化、XSS対策、SQL...
Security best practices for web applications. Covers OWASP Top 10, authentication, authorization, input validation, CSP,...
Audit OWASP Top 10, dependencies, secrets, and CVE exposure.
This skill should be used when the user requests to audit, check, or improve application security by analyzing security...
Configures HTTP security headers to protect against XSS, clickjacking, and MIME sniffing attacks. Use when hardening web...
Comprehensive security patterns for authentication, authorization, input validation, and common vulnerability prevention
Creates response procedures for security incidents with containment steps, communication templates, and evidence collect...
Define detection, containment, eradication, and recovery playbooks.
Run or document a security incident response — contain, eradicate, recover, and learn. Use when responding to a breach/c...
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full se...
Security controls and structured logging implementation. Use when security logging guidance is required.
Manage security policies and access controls for Protect surveillance. Monitor access to recordings and system settings...
Next.js security audit patterns. Load when reviewing Next.js apps (next.config.js present). Covers NEXT_PUBLIC_* exposur...
セキュリティ観測。認可漏れ、インジェクション、機密漏えい、暗号誤用、依存脆弱性を検出。Use when: 認証/認可実装、外部入力処理、依存更新、コミット前チェック、セキュリティレビューして、脅威分析が必要な時。
Security Operations Center (SOC) practices, incident response, SIEM management, and threat hunting following NIST 800-61
Use this skill when you need to perform comprehensive security vulnerability assessments on a codebase. This skill launc...
Security Policy Generator - Auto-activating skill for Security Advanced.Triggers on: security policy generator, security...
Creates repeatable security review checklist for PRs with required checks, common pitfalls, and automated gating. Use fo...
Security and privacy engineering
🛡️ Comprehensive security management for festivals including crowd control, threat assessment, emergency response, and...
Scan code or configuration for common security issues. Use when a mid-level developer needs a quick security pass.
Implement authentication, authorization, and security controls. Use for JWT handling, API key management, RBAC, OAuth in...
Generate security assessment reports in docx format with findings, risk ratings, and remediation recommendations.Use whe...
Review a proposed or implemented solution for security risks, threat coverage, control effectiveness, and security evide...
MANDATORY for security-sensitive code changes - OWASP-based security review with dedicated checklist, required before PR...
基於 OWASP Top 10 和安全最佳實踐，對程式碼進行安全性審查。
Proactive security scanning. Triggers when modifying auth, API endpoints, user data, or sensitive operations.
Run security scans locally (Semgrep, Trivy, Gitleaks) to detect vulnerabilities, secrets, and code issues before pushing...
Scans DAPR projects for security issues including plain-text secrets, missing ACLs, insecure configurations, and securit...
Use when working with security scanning security hardening
Security standards for credential handling and authentication
Activate when conducting security analysis using STRIDE threat modeling, vulnerability assessment, and security architec...
Plan security testing strategies including OWASP testing, penetration test scoping, SAST/DAST integration, and threat-ba...
Automate vulnerability scans.
Conducts systematic security analyses using methodologies like STRIDE to identify vulnerabilities in software architectu...
Runtime security validation including secret scanning, PII detection, prompt injection defense, audit logging, and outpu...
Security protocols and vendor management expertise from Marcus covering emergency response codes, vendor relations, and...
Vite security audit patterns. Load when reviewing Vite apps (vite.config.ts present). Covers VITE_* exposure, build-time...
Workflow for auditing security vulnerabilities using Trunk (Trivy and OSV-scanner). Use when checking for project vulner...
Respond to security vulnerability reports. Use when a researcher reports a security issue or asks about bug bounty polic...
Document security research, CTF solutions, and malware analysis. Includes REPORT.md and STATUS.md templates.
Seed test database with users, quiz responses, and meal plans for development
Generate realistic seed/fixture data based on schema analysis
Use when creating demo data, test fixtures, seed scripts, or factory functions, when preparing for a sales demo and the...
Seed the development database. Use when setting up local dev or resetting test data.
Drop all data and re-seed the database with realistic Saudi demo data. Use when the user says "reset the demo data", "fr...
Diagnose seeker development patterns including return problem, knowledge validation, sacred company effects, self-effort...