All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,679
- 1,237
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 3,625–3,648 of 29,679 skills
- Qa Specialist SecurityDesign authorized, bounded, reproducible security checks without turning scanner findings into penetration-test permission.Votes: 0GitHub stars: 3
- Qa Specialist ProductionPlan explicitly authorized read-only production observations and trace evidence-backed causes into preventive regression coverage without external effects.Votes: 0GitHub stars: 3
- Qa Specialist PerformanceDesign bounded performance profiles with explicit load authorization, contextual samples, percentiles, and agreed thresholds.Votes: 0GitHub stars: 3
- Qa Specialist MobileDesign platform-specific Android and iOS checks with explicit SDK, driver, device, lifecycle, and evidence prerequisites.Votes: 0GitHub stars: 3
- Qa Specialist DataDesign traceable data checks for reconciliation, integrity, transactions, and atomicity with separate observable oracles.Votes: 0GitHub stars: 3
- Qa Specialist CicdDesign deterministic CI quality gates that read the normalized manifest verdict independently from report-export process status.Votes: 0GitHub stars: 3
- Qa Specialist ApiDesign traceable API checks for contracts, authentication, authorization, errors, and idempotency with observable outcomes.Votes: 0GitHub stars: 3
- Qa ReviewReview requirements, coverage, results, evidence, and findings without changing the product or recorded state.Votes: 0GitHub stars: 3
- Qa ReportExport one validated QA manifest as matching HTML and PDF without executing tests or evidence commands.Votes: 0GitHub stars: 3
- Qa ReleaseProduce an evidence-backed release readiness opinion while keeping the human release decision separate.Votes: 0GitHub stars: 3
- Qa RegressionBuild an impact-based regression selection with explicit traceability, inclusions, exclusions, and limitations.Votes: 0GitHub stars: 3
- Dknet Slimbus CqrsCovers DKNet.SlimBus.Extensions: the Fluents.Requests/Fluents.Queries/Fluents.EventsConsumers contracts (INoResponse, IWitResponse<T>, IWitPageResponse<T>, IHandler<,>, IWithKey<T>), NotFoundError, and FluentResults Result/IResultBase conventions inside a CQRS handler. Explains AddSlimBusEfCoreInterceptor's auto-SaveChanges-after-handler rule (why a CQRS handler calling SaveChangesAsync twice is wrong), AddSlimBusEventPublisher forwarding domain events onto the bus, and wiring SlimMessageBus ...Votes: 0GitHub stars: 6
- Dknet Efcore Data SecurityCovers DKNet.EfCore.DataAuthorization and DKNet.EfCore.Encryption. DataAuthorization gives a multi-tenant row filter over IOwnedBy entities via IDataOwnerProvider and IDataOwnerDbContext.AccessibleKeys, wired with AddDataOwnerProvider<TDbContext,TProvider>; the global query filter fails closed (empty AccessibleKeys denies, not allows) and a SaveChanges hook stamps OwnedBy. Encryption encrypts a column transparently by marking a string property [Encrypted], registering AddEfCoreEncryption<TKey...Votes: 0GitHub stars: 6
- ShipRun quality gates, commit, push, and open a PR with the canonical template. Use when the user runs /ship or wants to ship the current changes.Votes: 0GitHub stars: 2
- ReviewRisk-tiered code review (Blocker / High / Medium / Low). Use when the user runs /review or wants the current branch or diff reviewed.Votes: 0GitHub stars: 2
- Runtime Fetch OnboardUse when legal, license, or gated-access restrictions prevent baking source, SDKs, weights, datasets, or assets into a public NPA image; design and validate either a redistributable runtime-fetch bootstrap or an operator-built private derivative without treating delivery as a license bypass.Votes: 0GitHub stars: 33
- Nebius Service Account AuthSet up or verify unattended Nebius CLI authentication on a VM or CI runner using a project-scoped service account, an attached VM identity, or an authorized-key profile. Use human OAuth skills when the operator needs their personal identity.Votes: 0GitHub stars: 33
- Better Auth Security Best PracticesConfigure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth deployment.Votes: 0GitHub stars: 2
- Edward Arinin Web Dev Dexe SetupGuided setup journey for dexe-mcp. Explains that reads work with ZERO config, then walks the user through only the keys that unlock more — signing, DAO/ proposal creation (Pinata JWT), and optional reliability upgrades — telling them for each one exactly what breaks if they skip it. Drives from `dexe_doctor`, edits `.env` (NEVER `.claude.json`), and tells them to restart. Triggered by `/dexe-setup`, or proactively when a tool reports a missing key ("DEXE_PINATA_JWT is required…", "public RPC ...Votes: 0GitHub stars: 76
- Cyanheads Security PassReview an MCP server for common security gaps: LLM-facing surfaces as injection vector (tools, resources, prompts, descriptions), scope blast radius, destructive ops without consent, upstream auth shape, input sinks (URL / path / roots / shell / schema strictness / ReDoS), tenant isolation, leakage through errors and telemetry, unbounded resources, and HTTP-mode deployment surface. Use before a release, after a batch of handler changes, or when the user asks for a security review, audit, or h...Votes: 0GitHub stars: 76
- Cyanheads Report Issue LocalFile a bug or feature request against this MCP server's own repo. Use for server-specific issues — tool logic, service integrations, config problems, or domain bugs that aren't caused by the framework.Votes: 0GitHub stars: 76
- Cyanheads Report Issue FrameworkFile a bug or feature request against @cyanheads/mcp-ts-core when you hit a framework issue. Use when a builder, utility, context method, or config behaves contrary to the documented API — not for server-specific application bugs.Votes: 0GitHub stars: 76
- Cyanheads Api AuthAuthentication, authorization, and multi-tenancy patterns for `@cyanheads/mcp-ts-core`. Use when implementing auth scopes on tools/resources, configuring auth modes (none/jwt/oauth), working with JWT/OAuth env vars, or understanding how tenantId flows through ctx.state.Votes: 0GitHub stars: 76
- Ashrafiucse Spring SecurityAudits Spring Boot / Spring (Java) applications for framework-specific vulnerabilities — JPQL/native query concatenation, JdbcTemplate string-concat SQL injection, MyBatis ${} substitution, Thymeleaf th:utext and JSP scriplet XSS, Spring Security misconfigurations (csrf().disable(), permitAll() on sensitive matchers), Actuator endpoint over-exposure (env/heapdump leak credentials), hardcoded datasource/JWT secrets in properties, Jackson enableDefaultTyping deserialization, SpEL injection, ses...Votes: 0GitHub stars: 76