All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,649–12,672 of 32,009 skills
- Fix Selected Security FindingsUse this skill only when the user explicitly selects security finding IDs to fix. Do not use it to fix all findings or perform broad refactors.Votes: 0GitHub stars: 4
- Firm Runtime Audit PackRuntime environment and configuration audit pack. Validates Node.js version, secrets workflow, HTTP headers, allowed commands, trusted proxy, disk budget, and DM allowlist. 7 runtime security tools.Votes: 0GitHub stars: 4
- Fireworks SecuritySecurity hardening superbrain — CWE Top 25, STRIDE threat modeling, Electron hardening, encryption, dependency audits, OWASP complianceVotes: 0GitHub stars: 4
- Firewall Appliance· Manage OPNsense/pfSense via SSH: pfctl, pf rules, CARP, CrowdSec, pfBlockerNG. Triggers: 'opnsense', 'pfsense', 'pfctl', 'CARP', 'configctl'. Not for Linux firewalls.Votes: 0GitHub stars: 4
- Fireflies Incident RunbookExecute Fireflies.ai incident response with triage, remediation, and postmortem. Use when responding to Fireflies.ai API outages, auth failures, or webhook delivery problems. Trigger with phrases like "fireflies incident", "fireflies outage", "fireflies down", "fireflies on-call", "fireflies emergency", "fireflies broken".Votes: 0GitHub stars: 4
- Firebase Vertex AiExecute firebase platform expert with Vertex AI Gemini integration for Authentication, Firestore, Storage, Functions, Hosting, and AI-powered features. Use when asked to "setup firebase", "deploy to firebase", or "integrate vertex ai with firebase". Trigger with relevant phrases based on skill purpose.Votes: 0GitHub stars: 4
- Fintech ApiScaffold a production-ready financial services API -- generate a complete fintech backend with Plaid bank account linking and transaction sync, ACH/wire/card payment processing with payment orchestration, double-entry bookkeeping ledger with immutable entries and balance caching, KYC identity verification workflow with progressive tiers and document upload, idempotent request handling with deduplication windows, HMAC-signed outbound webhooks with retry and exponential backoff, append-only aud...Votes: 0GitHub stars: 4
- Finta Security BasicsSecure Finta fundraising data and investor information. Trigger with phrases like "finta security", "finta data privacy".Votes: 0GitHub stars: 4
- Find Cybersecurity FirmUse whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed SOC, IAM, cloud security, and AppSec. Triggers on "find me a pen-testing firm for our SOC 2 audit", "shortlist three vCISO services for our healthcare-tech startup", "we need an incident response retainer", or "pull contact info for these 8 security firm domains", even when described indirectly (we got breached, prepa...Votes: 0GitHub stars: 4
- File Upload Virus ScanningUse when designing malware and content scanning for files uploaded to Salesforce (Files, Attachments, ContentVersion) — external scanning service callouts, quarantine patterns, and user-facing messaging. Triggers: 'virus scan salesforce upload', 'malware scan content version', 'quarantine uploaded file', 'clamav salesforce', 'file upload security'. NOT for field-level data validation.Votes: 0GitHub stars: 4
- Figma Security BasicsSecure Figma API tokens, configure scopes, and validate webhook signatures. Use when securing API keys, implementing least-privilege scopes, or auditing Figma security configuration. Trigger with phrases like "figma security", "figma secrets", "secure figma token", "figma scopes", "figma webhook verify".Votes: 0GitHub stars: 4
- Figma Install AuthSet up Figma REST API authentication with personal access tokens or OAuth 2.0. Use when connecting to the Figma API, generating tokens, configuring scopes, or setting up OAuth flows for Figma integrations. Trigger with phrases like "install figma", "setup figma API", "figma auth", "figma personal access token", "figma OAuth".Votes: 0GitHub stars: 4
- Fetch Missing CredentialsUse when writing cross-origin fetch() calls that require cookies or session auth to ensure `credentials: 'include'` is set.Votes: 0GitHub stars: 4
- FedrampAssess FedRAMP/StateRAMP readiness — impact levels, control baselines, 3PAO requirementsVotes: 0GitHub stars: 4
- Fathom Security BasicsSecure Fathom API keys and handle meeting data privacy. Trigger with phrases like "fathom security", "fathom api key safety", "fathom privacy".Votes: 0GitHub stars: 4
- Fastapi Security ExpertExpert in securing FastAPI applications with JWT tokens and Better Auth. Use this when implementing authentication middleware, route protection, and user isolation.Votes: 0GitHub stars: 4
- Fastapi ReviewerWHEN: FastAPI project review, Pydantic models, async endpoints, dependency injection WHAT: Pydantic validation + Dependency injection + Async patterns + OpenAPI docs + Security WHEN NOT: Django → django-reviewer, Flask → flask-reviewer, General Python → python-reviewerVotes: 0GitHub stars: 4
- Fastapi HelperFastAPI development assistant for building modern Python web APIs. Provides guidance on routing, request/response handling, dependency injection, authentication, middleware, WebSockets, testing, and Pydantic models. Use when: (1) Creating FastAPI applications or endpoints, (2) Implementing CRUD operations, (3) Setting up authentication/authorization, (4) Working with request parameters (path, query, body, headers, cookies, forms, files), (5) Configuring middleware or CORS, (6) Implementing We...Votes: 0GitHub stars: 4
- Fastapi GeneratorGenerates FastAPI endpoints with proper Pydantic models, dependency injection, async handlers, and OpenAPI documentation. Use when building Python REST APIs.Votes: 0GitHub stars: 4
- Fastapi Full StackEnterprise-grade FastAPI development covering complete full-stack architecture with Next.js/React frontend, Neon Serverless PostgreSQL, SQLModel ORM, security hardening, payment integrations (Stripe, JazzCash, EasyPaisa), async patterns, real-time features, microservices, and production deployment. Use when building APIs, integrating with databases, implementing authentication/authorization, payment systems, real-time functionality, or deploying to production.Votes: 0GitHub stars: 4
- Fastapi Dependency InjectionMaster FastAPI dependency injection for building modular, testable APIs.Votes: 0GitHub stars: 4
- Fastapi CoderBuild FastAPI applications with async patterns, Pydantic validation, dependency injection, and modern Python API practices.Votes: 0GitHub stars: 4
- Fastapi Auth PatternsImplement and validate FastAPI authentication strategies including JWT tokens, OAuth2 password flows, OAuth2 scopes for permissions, and Supabase integration. Use when implementing authentication, securing endpoints, handling user login/signup, managing permissions, integrating OAuth providers, or when user mentions JWT, OAuth2, Supabase auth, protected routes, access control, role-based permissions, or authentication errors.Votes: 0GitHub stars: 4
- Fastapi Auth And Security ReviewUse when adding auth/authz, HTTP-surface hardening, or an OWASP review to a scaffolded FastAPI service after the auth provider decision is approved or deferred. Adds the authentication, default-deny authz, hardening, and security-test layer the scaffold defers. Not for observability, tasks, or performance.Votes: 0GitHub stars: 4