All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 32,009
- 1,334
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 12,721–12,744 of 32,009 skills
- Doppler Secret ValidationValidate and test Doppler secrets. TRIGGERS - add to Doppler, store secret, validate token, test credentials.Votes: 0GitHub stars: 4
- Doncheli SecurityPerform OWASP Top 10 static security audit identifying vulnerabilities in access control, cryptography, injection, configuration, and logging. Activate when user mentions "security audit", "OWASP", "security scan", "vulnerabilities", "auditar seguridad".Votes: 0GitHub stars: 4
- Doncheli Data PolicyAudit and document what personal or sensitive data the project collects, processes, and stores. Activate when user mentions "privacy", "data policy", "what data", "GDPR", "personal data", "data retention", "PII".Votes: 0GitHub stars: 4
- Domain AssessmentDomain reconnaissance coordinator that orchestrates subdomain discovery and port scanning to build comprehensive domain attack surface inventoryVotes: 0GitHub stars: 4
- Dokploy Security HardeningSecurity best practices for Dokploy templates: secrets management, network isolation, least privilege, image security, and hardening recommendations.Votes: 0GitHub stars: 4
- Dokploy Environment ConfigEnvironment variable patterns for Dokploy templates including required vs optional syntax, secrets, connection strings, and configuration organization.Votes: 0GitHub stars: 4
- Documenso Install AuthInstall and configure Documenso SDK/API authentication. Use when setting up a new Documenso integration, configuring API keys, or initializing Documenso in your project. Trigger with phrases like "install documenso", "setup documenso", "documenso auth", "configure documenso API key".Votes: 0GitHub stars: 4
- Dockerfile Security Hardening AdvisorAudits Dockerfiles for security vulnerabilities using Hadolint and Trivy container scanner. Recommends hardening steps based on CIS Docker Benchmark and Snyk container advisories.Votes: 0GitHub stars: 4
- Docker VulnerabilitiesOWASP Docker Top 6 vulnerability knowledge base for identifying, assessing, and remediating security risks in containerized Docker environments.Votes: 0GitHub stars: 4
- Docker Image Vulnerability TriageRuns Trivy against a Docker image and produces a prioritized CVE list grouped by severity with fix availability. Filters out CVEs with no available fix. Outputs a structured report suitable for Jira or GitHub Issues.Votes: 0GitHub stars: 4
- Django Security AdvancedAdvanced Django security — file upload validation (extension/size/storage), DRF API security (rate limiting throttles, JWT), Content Security Policy middleware, django-environ secrets management, security event logging, and production deployment checklist.Votes: 0GitHub stars: 4
- Django AllauthDjango authentication - local accounts, social OAuth, registration, email verification, MFA, session managementVotes: 0GitHub stars: 4
- Distribution SecurityDefense-in-depth, PII protection, secrets scanning, and secure packaging for distributed softwareVotes: 0GitHub stars: 4
- Discord OpsTOS-compliant Discord notification monitor. Watches YOUR Discord server for security content forwarded by researchers, matches keywords, and pushes to paper-writer/dogpile via webhooks. Persists to graph-memory for semantic search.Votes: 0GitHub stars: 4
- Devsecops Supply Chain AuditAudit software supply chain across every ecosystem (npm, pip, Go, Ruby, Cargo, Maven, Docker, Terraform) — pinning, vulnerabilities, secrets, SBOM, signing, branch protection, CODEOWNERS. One sub-agent per ecosystem. Three modes.Votes: 0GitHub stars: 4
- Devsecops PatternsDevSecOps patterns — shift-left security, SAST (semgrep/CodeQL), secrets detection (gitleaks/trufflehog), dependency scanning (trivy/grype), DAST, OPA/Falco policy-as-code, container security, and security gates per CI stage.Votes: 0GitHub stars: 4
- Devsecops EngineerShift-left scanning, policy-as-code, signed artifacts, SBOM.Votes: 0GitHub stars: 4
- Developer Delphi To Fpc Horse Basic Auth V1 0 0Middleware HTTP Basic Authentication para Horse. Cobre HorseBasicAuthentication (callback de validação, configuração THorseBasicAuthenticationConfig), Header, RealmMessage, SkipRoutes e proteção por rota. Fonte: app/package/docs/pacotes/horse-basic-auth.md.Votes: 0GitHub stars: 4
- Developer Delphi Horse Basic Auth V1 0 0Middleware HTTP Basic Authentication para Horse. Cobre HorseBasicAuthentication (callback de validação, configuração THorseBasicAuthenticationConfig), Header, RealmMessage, SkipRoutes e proteção por rota. Fonte: app/package/docs/pacotes/horse-basic-auth.md.Votes: 0GitHub stars: 4
- Dev Vulnerability AnalyzerAnalyse et évalue les vulnérabilités d'un système ou d'une application. À utiliser pour comprendre et prioriser les vulnérabilités. Se déclenche avec "vulnérabilité", "CVE", "faille", "vulnerability", "risque sécurité", "score CVSS", "patch critique".Votes: 0GitHub stars: 4
- Dev Security AuditorAudit de sécurité complet d'une application ou d'un code source. À utiliser quand l'utilisateur veut vérifier la sécurité de son projet. Se déclenche avec "audit sécurité", "security audit", "vérifier la sécurité", "est-ce que mon code est sécurisé", "analyse de sécurité".Votes: 0GitHub stars: 4
- Dev Owasp CheckerVérifie un projet contre le OWASP Top 10 et propose des remédiations. À utiliser pour vérifier la conformité OWASP. Se déclenche avec "OWASP", "top 10", "failles web", "sécurité web", "A01 broken access", "injection", "vérifier OWASP".Votes: 0GitHub stars: 4
- Dev Oauth2 Oidc AdvisorImplémentation d'OAuth2, OpenID Connect, JWT et gestion des tokens pour sécuriser des APIs et applications web. À utiliser quand l'utilisateur configure de l'authentification, des tokens JWT, ou intègre un identity provider. Se déclenche aussi avec "OAuth2", "OIDC", "OpenID Connect", "JWT", "token", "refresh token", "identity provider", "Keycloak", "Azure AD", "Auth0".Votes: 0GitHub stars: 4
- Dev Multi TenantMulti-tenant development cycle orchestrator following Ring Standards. Auto-detects service stack (PostgreSQL, MongoDB, Redis, RabbitMQ, S3) and executes gate-based implementation using tenantId from JWT for database-per-tenant isolation via the lib-commons v5 dispatch layer with event-driven tenant discovery (Redis Pub/Sub). Use to add tenant isolation to a Go service. Requires lib-commons v5 + lib-auth v2.Votes: 0GitHub stars: 4