All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,673–12,696 of 32,009 skills
- Faro SecurityAudit sicurezza OWASP avanzato per pre-lancio. Checklist completa. Trigger: "audit sicurezza", "OWASP", "penetration test", "security review"Votes: 0GitHub stars: 4
- Fachanwalt Transport Adr GefahrgutADR Gefahrgut-Transport europaeisches UEbereinkommen. Klassifizierung Gefahrgut Klassen Verpackungs-Gruppen Kennzeichnung. Beauftragten-Pflicht Gefahrgut-Beauftragter § 1 GBV. Vorfaelle Anzeige BAM. Workflow Compliance-Pruefung Vorfaelle.Votes: 0GitHub stars: 4
- Fachanwalt It Recht OrientierungOrientierung im Informationstechnologierecht — FAO Voraussetzungen Normen typische Mandate Standardliteratur. Vertragsrecht IT (Software-Lizenz SaaS Cloud) DSGVO BDSG TDDDG (vormals TTDSG) TKG NIS2-Umsetzungsgesetz BSIG n.F. DDG (vormals TMG) DSA Digital Services Act DMA Digital Markets Act EU-KI-VO Verordnung 2024/1689. Open-Source-Compliance. Schnittstelle Plugin datenschutzrecht ki-governance vertragsrecht.Votes: 0GitHub stars: 4
- Fachanwalt Internationales Wirtschaftsrecht OrientierungOrientierung im Internationalen Wirtschaftsrecht — FAO Voraussetzungen Normen typische Mandate Standardliteratur. CISG UN-Kaufrecht Bruessel Ia VO Rom I und Rom II VO grenzueberschreitende Vertragspraxis Schiedsverfahren ICC UNCITRAL VIAC LCIA Investitionsschutzrecht ICSID-Bilateral Investment Treaty BIT EU Welthandelsrecht WTO Aussenhandel und Sanktionen EU-Sanktionen Compliance LkSG.Votes: 0GitHub stars: 4
- Fachanwalt Bank Kapitalmarktrecht OrientierungOrientierung im Bank- und Kapitalmarktrecht — FAO Voraussetzungen Normen typische Mandate Standardliteratur. KWG (Kreditwesengesetz) ZAG (Zahlungsdiensteaufsichtsgesetz) WpHG (Wertpapierhandelsgesetz) WpIG (Wertpapierinstitutsgesetz) MiFID-II MAR Marktmissbrauchsverordnung MiCAR Markets in Crypto Assets BGB-Verbraucherkredit §§ 491 ff. Beratungspflichten Aufklaerungspflichten Beratungshaftung.Votes: 0GitHub stars: 4
- Fachanwalt Agrarrecht OrientierungOrientierung im Agrarrecht — FAO Voraussetzungen Normen typische Mandate Fristen Standardliteratur. Hoefeordnung (HoefeO) Anerbenrecht der Bundeslaender Landpachtrecht (BGB §§ 581 ff.) Grundstuecksverkehrsgesetz GVG-Grund EU-Agrarpolitik Direktzahlungen Cross-Compliance Duengerecht Tierschutzgesetz Tierseuchenrecht Pflanzenschutzgesetz Wassergesetz Naturschutzgesetz Forstrecht.Votes: 0GitHub stars: 4
- Express Api DevelopmentMaster Express.js API development with middleware, routing, validation, authentication, and production best practices. Build scalable RESTful APIs with Express.Votes: 0GitHub stars: 4
- ExploitsAnalyze exploit intelligence for a vulnerability against the current repositoryVotes: 0GitHub stars: 4
- Exploits SearchSearch for exploits across all vulnerabilities with filtering by ecosystem, severity, source, and EPSSVotes: 0GitHub stars: 4
- Exploit TestGenerate a runnable exploit-validation command (Nuclei template, Metasploit module hint, AI-assisted Python script, or curl-based PoC) against a user-specified authorised target. Use when validating that a fix actually closed the vulnerability path, confirming a patch deployed correctly, or producing a copy-pasteable test command for QA. The skill never executes — the user runs.Votes: 0GitHub stars: 4
- Excel Multi Sheet ExportExportiert den dreidimensionalen Wuerfel in eine einzige Excel-Datei mit mehreren Tabellenblaettern — ein Reiter pro Arbeitsblatt-Perspektive (Recht / Steuer / Wirtschaft / Datenschutz / IT / Betrieb / Compliance). Jede Tabelle: Zeilen = Dokumente Spalten = Datenpunkte Zellinhalt = Antwort plus woertliches Zitat plus Fundstelle plus Ampel-Farbcode. Zusatzreiter: 'Uebersicht' (Aggregat) 'Hotspots' (Spalten-Top-N) 'Widersprueche' (aus Kreuzblatt) 'Pruefer-Flags' 'Belegkette' (Hash-Tabelle) 'Pro...Votes: 0GitHub stars: 4
- Evil User StoriesThreat-model a feature described as a user story. Generates evil user stories (AS/I/SO format) mapped to MITRE CWE weaknesses, each paired with a concrete security control. Use when a user story describes a new feature to build (upload, email, search, API, auth, archive, etc.) and the goal is to identify what security controls must be implemented.Votes: 0GitHub stars: 4
- EvidenceCollect and store point-in-time compliance evidence snapshots for audit trail.Votes: 0GitHub stars: 4
- Evernote Security BasicsImplement security best practices for Evernote integrations. Use when securing API credentials, implementing OAuth securely, or hardening Evernote integrations. Trigger with phrases like "evernote security", "secure evernote", "evernote credentials", "evernote oauth security".Votes: 0GitHub stars: 4
- Eu Ai ActAssess EU AI Act compliance — risk classification, prohibited uses, high-risk requirements, transparencyVotes: 0GitHub stars: 4
- Etsy Listing PublisherPublishes draft Etsy listings live via Etsy API v3 with mandatory compliance gates. Use when the user wants to publish an Etsy listing, push a draft live, or activate an inactive listing. Validates required fields, applies AI Disclosure tag where required, sets shipping profile + return policy + production partner. Refuses to publish if compliance gaps exist. Defaults to draft mode — operator must confirm before going live.Votes: 0GitHub stars: 4
- Ethics CommitteeAct as a research ethics committee — stress-test a protocol the way an IRB / REC / HREC would. Reviews informed consent, risk-benefit balance, vulnerable populations, data privacy, deception, debriefing, payment, dual-use risks, AI/LLM use in research, and equity in recruitment. Produces a committee-style decision letter with required revisions, recommended changes, and approval pathway. Useful before IRB submission, when responding to IRB feedback, when drafting ethics sections of a paper or...Votes: 0GitHub stars: 4
- Error Handling ReviewerReview test cases for OAuth/OIDC error handling. Covers authorization endpoint errors, token endpoint errors, error response formats, HTTP status codes, and all error codes per OAuth 2.1 and OIDC Core 1.0.Votes: 0GitHub stars: 4
- Erforderlichkeit DokumentierenPruefe die Erforderlichkeit der Offenlegung von Berufsgeheimnissen gegenueber dem KI-Dienstleister nach Absatz eins der einschlaegigen Dienstleisterregelung (BRAO StBerG WPO PAO BNotO). Bezugspunkt ist nach DAV-Stellungnahme zweiunddreissig der Zweck der Offenlegung nicht die KI-Strategie der Kanzlei. Erstelle einen internen Compliance-Vermerk mit Beurteilungsspielraum und Grenzen.Votes: 0GitHub stars: 4
- Eresus Threat ModelerThreat modeling skill for new features, services, endpoints, or repositories. Trigger when the user asks to: "threat model this", "analyze attack surface", "find abuse cases", "map trust boundaries", "prioritize security review", or wants a structured security design review before or alongside coding. Complements eresus-sast-scanner by turning architecture into a prioritized scan plan.Votes: 0GitHub stars: 4
- Eresus Serialization ReviewSerialization and deserialization security review skill for object mappers, parser pipelines, message formats, and state transfer mechanisms. Trigger when the user asks to: "review serialization security", "check deserialization", "audit Jackson/Fastjson/YAML/XML parsing", "look for gadget-chain risk", "review session or message deserialization", or wants a focused audit of parser-driven attack surface. Complements eresus-sast-scanner with a deep dive on serialization abuse paths.Votes: 0GitHub stars: 4
- Eresus Sast ScannerGeneral-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code review of any language or framework. Covers 34 vulnerability classes across web, API, auth, mobile, and logic layers.Votes: 0GitHub stars: 4
- Eresus RemediatorSecurity remediation skill for fixing confirmed or likely SAST findings in source code. Trigger when the user asks to: "fix a vulnerability", "patch this security bug", "remediate SAST findings", "harden this endpoint", "make this auth flow safe", or wants code changes that remove a confirmed security issue while preserving intended behavior. Best used alongside eresus-sast-scanner.Votes: 0GitHub stars: 4
- Eresus Python AuditDeep Python-specific security audit skill with 50+ vulnerability class coverage across 7 categories. Trigger when auditing Python code: "audit this Python app", "find Python security issues", "check Flask/Django for vulnerabilities", "Python SAST review", "check for pickle vulnerabilities", "review this FastAPI code". Covers misconfiguration, injection, crypto, XSS, deserialization, and ML/AI attack surfaces. Includes scripts/rules.json for programmatic rule lookup.Votes: 0GitHub stars: 4