All authors
Claude Skills by tools-only
github.com/tools-only19,166 skills18 installs6,168 views
- 384 Control Set 08 Error Handling 91539108X-Powered-By: (remove) Server: (remove or set to generic value) X-Content-Type-Options: nosniff X-Frame-Options: DENY ``` ---Votes: 0GitHub stars: 9
- 385 Control Set Ext 10 Hardcoded Credentials 5b8d87dcNEVER store secrets, passwords, API keys, tokens or any other credentials directly in source code. Treat your codebase as public and untrusted. Any credential that appears in source code is compromised and must be handled through secure alternatives. Passwords and Authentication: - Database passwords, user passwords, admin passwords - API keys, secret keys, access tokens, refresh tokens - Private keys, certificates, signing keys - Connection strings containing credentials - OAuth client secre...Votes: 0GitHub stars: 9
- 385 Control Set Ext 10 Hardcoded Credentials 663456b9NEVER store secrets, passwords, API keys, tokens or any other credentials directly in source code. Treat your codebase as public and untrusted. Any credential that appears in source code is compromised and must be handled through secure alternatives. Passwords and Authentication: - Database passwords, user passwords, admin passwords - API keys, secret keys, access tokens, refresh tokens - Private keys, certificates, signing keys - Connection strings containing credentials - OAuth client secre...Votes: 0GitHub stars: 9
- 386 Control Set Ext 14 Mobile 53f24941**Domain**: MOBILE - 移动端安全 **Version**: 1.0 **Last Updated**: 2025-12-30 ---Votes: 0GitHub stars: 9
- 386 Control Set Ext 14 Mobile 56ce0614**Domain**: MOBILE - 移动端安全 **Version**: 1.0 **Last Updated**: 2025-12-30 ---Votes: 0GitHub stars: 9
- 387 Control Set Ext 16 Agentic 6f05df72**Domain**: AGENT - Agent系统与类Agent组件安全 **Version**: 1.0 **Last Updated**: 2026-01-03 **Reference**: OWASP Top 10 for Agentic Applications 2026 (ASI01-ASI10) ---Votes: 0GitHub stars: 9
- 387 Control Set Ext 16 Agentic 88d91113**Domain**: AGENT - Agent系统与类Agent组件安全 **Version**: 1.0 **Last Updated**: 2026-01-03 **Reference**: OWASP Top 10 for Agentic Applications 2026 (ASI01-ASI10) ---Votes: 0GitHub stars: 9
- 388 Reference Set 01 Authentication 36b87bff<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 388 Reference Set 01 Authentication 75581456<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 389 Reference Set 01 Cookie Theft Mitigation 017a4462<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 389 Reference Set 01 Cookie Theft Mitigation 6848b8fd<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 390 Reference Set 01 Forgot Password 4edeccfa<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 390 Reference Set 01 Forgot Password Ac32c6b6<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 391 Reference Set 01 Jaas 0a0d16c0<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 391 Reference Set 01 Jaas 2a444833<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 392 Reference Set 01 Jwt Java C192bdc3<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 392 Reference Set 01 Jwt Java E46983c1<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 393 Reference Set 01 Multifactor Authentication 196f4fda<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 393 Reference Set 01 Multifactor Authentication 5363bcda<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 394 Reference Set 01 Password Storage 15486362<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 394 Reference Set 01 Password Storage Bba43c08<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 395 Reference Set 01 Session Management 3bc5d120<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 395 Reference Set 01 Session Management 7aaafaee<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 396 Reference Set 02 Access Control 8dd17c5fThe Access Control cheatsheet has been deprecated. Please visit the [Authorization Cheatsheet](Authorization_Cheat_Sheet.md) instead.Votes: 0GitHub stars: 9
- 396 Reference Set 02 Access Control A00cc97cThe Access Control cheatsheet has been deprecated. Please visit the [Authorization Cheatsheet](Authorization_Cheat_Sheet.md) instead.Votes: 0GitHub stars: 9
- 397 Reference Set 02 Authorization Dde4a0c3<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 397 Reference Set 02 Authorization Fb6ec3cb<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 398 Reference Set 02 Transaction Authorization 350752a3<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 398 Reference Set 02 Transaction Authorization A160e4ea<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 399 Reference Set 03 Deserialization A0c3c75c<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 399 Reference Set 03 Deserialization F924eaa2<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 400 Reference Set 03 File Upload Aa45fd96<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 400 Reference Set 03 File Upload Dde7e823<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 401 Reference Set 03 Injection Prevention Java 0247ca9cThis information has been moved to the dedicated [Java Security CheatSheet](Java_Security_Cheat_Sheet.md#injection-prevention-in-java)Votes: 0GitHub stars: 9
- 401 Reference Set 03 Injection Prevention Java 7f56a12aThis information has been moved to the dedicated [Java Security CheatSheet](Java_Security_Cheat_Sheet.md#injection-prevention-in-java)Votes: 0GitHub stars: 9
- 402 Reference Set 03 Injection Prevention 0468c47a<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 402 Reference Set 03 Injection Prevention 9a702874<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 403 Reference Set 03 Input Validation B602fff0<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 403 Reference Set 03 Input Validation Bcaa1d79<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 404 Reference Set 03 Ldap Injection Prevention 1ae008ac<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 404 Reference Set 03 Ldap Injection Prevention Ebc1c964<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 405 Reference Set 03 Mass Assignment 350e41f4<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 405 Reference Set 03 Mass Assignment 7390d4b4<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 406 Reference Set 03 Os Command Injection Defense 1542d73c<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 407 Reference Set 03 Query Parameterization B2eba6f1<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 407 Reference Set 03 Query Parameterization C5ab37da<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 408 Reference Set 03 Sql Injection Prevention 80e8fc20<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 408 Reference Set 03 Sql Injection Prevention C4ebb4b2<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 409 Reference Set 03 Ssrf Prevention 2816fc60<!-- Threat Modeling Skill | Version 3.0.3 (20260209a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9
- 409 Reference Set 03 Ssrf Prevention Efc1f5d1<!-- Threat Modeling Skill | Version 3.0.2 (20260204a) | https://github.com/fr33d3m0n/threat-modeling | License: BSD-3-Clause -->Votes: 0GitHub stars: 9