4,624 skills sorted by stars.
Build or review code that handles login, permissions, user input, files, secrets, payments or personal data. Use this wh...
Implementing OWASP Proactive Controls (Input Validation, Output Encoding, AuthZ/AuthN). Use when: secure coding.
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
This skill should be used while WRITING any backend, API, auth, or data-handling code for a web app or SaaS — to prevent...
Use when writing code that handles untrusted input, authentication, or sensitive data. Covers injection prevention, auth...
Regularly audit dependencies for known vulnerabilities (npm audit, Snyk, Dependabot) Use when implementing security best...
Log detailed errors server-side but return generic messages to clients Use when implementing security best practices. Se...
Aplica la arquitectura de seguridad privada/publica a un proyecto Python existente con credenciales expuestas (fallback...
Use when shipping or reviewing an LLM feature that reads untrusted text or has tools — prompt-injection threat model, le...
A comprehensive security middleware system for Next.js 13+ App Router API routes that provides authentication, rate limi...
Ensure OTA updates are authenticated, integrity-checked, atomic, and safely recoverable, with regulatory considerations...
Run security review, then create a PR and watch CI checks
Security audit orchestrator for agent skills — scans for prompt injection, data exfiltration, credential theft, supply c...
This skill should be used when implementing secure, high-performance REST API endpoints for task management with strictl...
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...
Securing API Gateway endpoints with AWS WAF by configuring managed rule groups for OWASP Top 10 protection, creating cus...
This skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least pri...
Hardens AWS IAM configurations to enforce least-privilege access, covering IAM policy scoping, permission boundaries, IA...
This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escal...
Security engineering router for penetration testing, code auditing, red/blue/purple team operations, threat intelligence...
Security audit with Codex + MiniMax second opinion. Uses LSP for code navigation during analysis. Use when: (1) /securit...
| ID | flutter-security |
Design RBAC/ABAC models, Principle of Least Privilege, Identity Management.
Security engineer for vulnerability assessment, penetration testing guidance, and secure code review. Use for OWASP Top...
Use when scanning for security vulnerabilities: SAST, dependency audit, secret detection, and SBOM generation with OWASP...
Proactive security engineering for PAI projects. USE WHEN user needs threat modeling, CMMC compliance baseline, security...
One breach = game over. Threat modeling, OWASP Top 10, secure coding, security architecture, zero trust. The complete se...
Run repository security scans.
Apply security guardrails (authentication, authorization, input validation, SQL/XSS/command injection prevention, secret...
Create security architecture diagrams using PlantUML syntax with identity, encryption, firewall, and compliance stencil...
Security audit workflow - vulnerability scan → verification
Implement production security practices covering OWASP Top 10, input validation, injection prevention, and secrets manag...
Security audit, vulnerability scanning, and secure coding practices. Use when reviewing code for OWASP vulnerabilities,...
[Code Quality] Perform security review on specified scope
Use when applying security best practices — authentication, authorization, CSRF protection, input sanitization, rate lim...
Spring Security 6+ standards, Lambda DSL, and Hardening
Workflow Phase 8 (optional) — OWASP-aligned security review of pending code changes. Produces a prioritized findings rep...
Guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regula...
セキュリティ・脆弱性対策の開発・テストを行う際に使用。OAuth/OIDC攻撃対策、認証識別子切り替え攻撃、Session Fixation、マルチテナント分離、セキュリティテスト実装時に役立つ。
Standards for Data Encryption, Network Security, and Permissions
Auto-apply security basics. Never ask user about security choices. Just do it.
Use when Forge performs security review. Security reviewer audits OWASP Top 10, scans for secrets, reviews auth/authz lo...
AWS security skills including compliance checking, IAM best practices, secrets rotation, and security audits.
Application security guidance covering OWASP Top 10 mitigations, secrets handling, boundary validation, SQL injection pr...
Scan and redact PII and sensitive data (emails, phone numbers, SSNs, API keys, IP addresses, credentials, amounts, compa...
Run an authorized security review of a web app you own or are cleared to test, especially local and dev builds. Dev mode...
Implements security-sensitive changes with conservative trust boundaries, secret protection, tests, and verification.
Evidence-grounded threat modeling, vulnerability review, and secure implementation. Use for explicit security audits or...