Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 28,990
pages available: 1,208

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 1,033–1,056 of 28,990 skills

Browser Account Settings Change PreviewAUse when a task involves previewing a browser account setting change before saving it to record the target site and origin, browser and driver version, active account, test or production context, user authorization, data sensitivity, and intended side effects. Use a bounded, reproducible interaction, verify both browser-visible and relevant underlying state, preserve evidence safely, and report uncertainty. Do not reuse profiles, disclose authentication state, or perform external writes witho...securityrustrailsVotes: 0GitHub stars: 2
Browser Accessibility Snapshot Diff EvaluationAUse when a task involves comparing browser accessibility-tree snapshots after a UI change to record the target site and origin, browser and driver version, active account, test or production context, user authorization, data sensitivity, and intended side effects. Use a bounded, reproducible interaction, verify both browser-visible and relevant underlying state, preserve evidence safely, and report uncertainty. Do not reuse profiles, disclose authentication state, or perform external writes w...securityrustrailsVotes: 0GitHub stars: 2
Browser Accessibility Locator Fallback PolicyAUse when a task involves choosing a safe fallback when an interactive element lacks a reliable accessible locator to record the target site and origin, browser and driver version, active account, test or production context, user authorization, data sensitivity, and intended side effects. Use a bounded, reproducible interaction, verify both browser-visible and relevant underlying state, preserve evidence safely, and report uncertainty. Do not reuse profiles, disclose authentication state, or p...securityrustrailsVotes: 0GitHub stars: 2
Web Server DevelopmentAUse when implementing an HTTP server, routing layer, reverse proxy, or web-serving runtime to define supported protocol behavior, concurrency and resource limits, and trust boundaries before exposing a listener; test malformed requests and filesystem access in a local harness. Trigger for request parsing, routing, middleware, static files, or server lifecycle work.securityrustsecurityVotes: 0GitHub stars: 2
Fastapi Router PatternsAUse when a task involves organizing FastAPI routes around validated request models, dependency boundaries, and testable service logic to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not ...securitypythonrustVotes: 0GitHub stars: 2
Browser Api Replay Write Safety ReviewAUse when a task involves reviewing whether a browser-captured API request can be replayed without unintended side effects to record the target site and origin, browser and driver version, active account, test or production context, user authorization, data sensitivity, and intended side effects. Use a bounded, reproducible interaction, verify both browser-visible and relevant underlying state, preserve evidence safely, and report uncertainty. Do not reuse profiles, disclose authentication sta...securityrustrailsVotes: 0GitHub stars: 2
Api Contract DesignAUse when designing or changing an HTTP API contract consumed by another service, client, or team to specify resources, method semantics, schemas, errors, pagination, compatibility, and security boundaries before implementation. Trigger for new endpoints, public or partner APIs, versioning decisions, and contract reviews.securityrustrailsVotes: 0GitHub stars: 2
Github Issue AuthoringAUse when a task involves turning a verified problem or feature request into a concise, actionable GitHub issue to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not install or run third-pa...securityrustgoVotes: 0GitHub stars: 2
Create Github Pull Request From SpecificationAUse when a task involves turning an approved technical specification into a small, reviewable GitHub pull request to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not install or run third...securityrustgoVotes: 0GitHub stars: 2
Create Github Action Workflow SpecificationAUse when a task involves specifying a GitHub Actions workflow before implementation, including events, permissions, jobs, outputs, and failure handling to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focus...securityrustgoVotes: 0GitHub stars: 2
Architecture Blueprint GeneratorAUse when a task involves turning system requirements into a reviewable architecture blueprint with boundaries, data flows, and decision points to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain...securityrustgoVotes: 0GitHub stars: 2
Quantum Cryptographic Transition Risk BriefAUse when a task involves preparing a high-level quantum risk assessment for cryptographic assets to define the target, lifecycle stage, controlling artifact, authoritative evidence, version or operating conditions, sensitivity, and approval boundary before applying the method. Separate observed facts from assumptions and model output. Verify the result with appropriate independent checks, preserve provenance, and report uncertainty and limitations. Do not perform production, financial, device...securityrustgoVotes: 0GitHub stars: 2
Macos Nested Code Signature Order AuditAUse when a task involves checking signing order and signature integrity for a macOS app with embedded code to record Swift, Xcode, operating-system, build, and target versions; reproduction steps; data sensitivity; and the permission boundary before acting. Check current Apple or Swift documentation, preserve source and trace provenance, and verify on an owned test target. Do not change signing credentials, publish, notarize, or operate production systems without explicit approval.securityswiftrailsVotes: 0GitHub stars: 2
Iot Device Inventory And Identity AuditAUse when a task involves auditing device identity, ownership, and lifecycle records in an IoT fleet to define the target, lifecycle stage, controlling artifact, authoritative evidence, version or operating conditions, sensitivity, and approval boundary before applying the method. Separate observed facts from assumptions and model output. Verify the result with appropriate independent checks, preserve provenance, and report uncertainty and limitations. Do not perform production, financial, dev...securityrustrailsVotes: 0GitHub stars: 2
Iot Camera Fleet Credential Rotation PlanAUse when a task involves planning credential rotation for a managed camera fleet to define the target, lifecycle stage, controlling artifact, authoritative evidence, version or operating conditions, sensitivity, and approval boundary before applying the method. Separate observed facts from assumptions and model output. Verify the result with appropriate independent checks, preserve provenance, and report uncertainty and limitations. Do not perform production, financial, device-control, deploy...securityrustrailsVotes: 0GitHub stars: 2
Emc Precompliance CheckAUse when a task involves screening a PCB design for likely electromagnetic-compatibility risks before formal testing to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not install or run th...securityrustgoVotes: 0GitHub stars: 2
Embedded Wifi Low Power DiagnosticsAUse when a task involves collecting structured evidence for Wi-Fi sleep-current or wake failures in an embedded device to define the target, lifecycle stage, controlling artifact, authoritative evidence, version or operating conditions, sensitivity, and approval boundary before applying the method. Separate observed facts from assumptions and model output. Verify the result with appropriate independent checks, preserve provenance, and report uncertainty and limitations. Do not perform product...securityrustrailsVotes: 0GitHub stars: 2
Dataverse Python Advanced PatternsAUse when a task involves building a Python integration with Microsoft Dataverse using current supported authentication, paging, and API behavior to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused doma...securitypythonrustVotes: 0GitHub stars: 2
Pr To VideoAUse when a task involves turning an approved pull request into a concise, accurate video summary for its intended audience to identify the intended outcome, relevant inputs, platform or version, sensitive data, and permission boundary before acting. Use current primary documentation for version-sensitive behavior, produce a reviewable artifact, and verify it against stated criteria. Trigger for planning, implementation, evaluation, or troubleshooting in this focused domain; do not install or ...securityrustgoVotes: 0GitHub stars: 2
Vulnerability Workaround Expiry And Patch TransitionAUse when a task involves managing a temporary workaround until a vendor fix is available and validated to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...securityrustgoVotes: 0GitHub stars: 2
Vulnerability Vendor Advisory CrosscheckAUse when a task involves corroborating a vulnerability record against the affected vendor's primary advisory to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...securityrustgoVotes: 0GitHub stars: 2
Vulnerability Transitive Dependency Impact TriageAUse when a task involves understanding how a transitive package finding affects the owning application to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...securityrustgoVotes: 0GitHub stars: 2
Vulnerability Severity Normalization Across ToolsAUse when a task involves reconciling different scanner severity labels into one transparent triage view to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...securityrustgoVotes: 0GitHub stars: 2
Vulnerability Scanner Coverage ReconciliationAUse when a task involves checking which assets and protocols a vulnerability scan did and did not cover to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...securityrustshellVotes: 0GitHub stars: 2