All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,160
- 1,299
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 16,513–16,536 of 31,160 skills
- Contribute Workbench ImageUse when an external contributor or maintainer adds or changes an NPA workbench image and must carry it through licensing review, trusted public-dev build, real validation, and digest-identical GHCR release promotion.Votes: 0GitHub stars: 105
- Health PreflightUse before any deploy, image build, provisioning, or GPU submit to prove service credentials with `npa workbench health preflight`, request `--checks nebius` before provisioning, and verify gated-model access with `npa workbench health access`.Votes: 0GitHub stars: 105
- Wg Code SentinelAsk WG Code Sentinel to review your code for security issues. Use when applying Project Glasswing code sentinel security patterns.Votes: 0GitHub stars: 9
- Token Administration Console ValidatorRFC compliance validator for Token Administration Console implementations - OAuth 2.0, Bearer Token, Token Introspection. Use when you need help with token administration console validator.Votes: 0GitHub stars: 9
- Security TestingExpert in security testing methodologies and penetration testing. Use when writing, running, or improving tests with security testing.Votes: 0GitHub stars: 9
- Security ReviewUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.Votes: 0GitHub stars: 9
- Secret Management ExpertExpert in secret management with HashiCorp Vault, AWS Secrets Manager, and secure secrets handling. Use when performing security analysis, auditing, or hardening with secret management.Votes: 0GitHub stars: 9
- Sast Dast ExpertExpert in Static and Dynamic Application Security Testing. Use when performing security analysis, auditing, or hardening with sast dast.Votes: 0GitHub stars: 9
- Saas MultitenancyExpert in designing multi-tenant SaaS architectures with isolation, scalability, and enterprise features. Use when designing system architecture or making technical decisions about saas multitenancy.Votes: 0GitHub stars: 9
- Rfc Multitenancy ArchitectureComprehensive multi-tenancy architecture guide using RFC standards for identity, authorization, and provisioning. Use when implementing or validating rfc multitenancy architecture protocol compliance.Votes: 0GitHub stars: 9
- Rfc Compliance AgentAutonomous agent that searches RFC standards online and refactors codebases for compliance. Use when implementing or validating rfc compliance agent protocol compliance.Votes: 0GitHub stars: 9
- Rfc 8705 MtlsCertificate-based client authentication and token binding for high-security OAuth 2.0. Use when implementing or validating rfc 8705 mtls protocol compliance.Votes: 0GitHub stars: 9
- Rfc 8693 Token ExchangeToken exchange for delegation, impersonation, and cross-domain identity federation. Use when implementing or validating rfc 8693 token exchange protocol compliance.Votes: 0GitHub stars: 9
- Rfc 7662 IntrospectionToken validation endpoint for resource servers and admin panels. Use when implementing or validating rfc 7662 introspection protocol compliance.Votes: 0GitHub stars: 9
- Rfc 7636 PkceProof Key for Code Exchange implementation for secure OAuth 2.0 authorization. Use when implementing or validating rfc 7636 pkce protocol compliance.Votes: 0GitHub stars: 9
- Rfc 7519 JwtComplete JWT implementation guide with claims validation and multi-tenancy patterns. Use when implementing or validating rfc 7519 jwt protocol compliance.Votes: 0GitHub stars: 9
- Rfc 6750 Bearer TokenImplementation guide for OAuth 2.0 Bearer Token Usage with multi-tenancy security. Use when implementing or validating rfc 6750 bearer token protocol compliance.Votes: 0GitHub stars: 9
- Rfc 6749 Oauth2Complete implementation guide for OAuth 2.0 Authorization Framework with multi-tenancy support. Use when implementing or validating rfc 6749 oauth2 protocol compliance.Votes: 0GitHub stars: 9
- Rezvani Soc2 ComplianceUse when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.Votes: 0GitHub stars: 9
- Rezvani Skill Security Auditor>. Use when you need help with skill security auditor.Votes: 0GitHub stars: 9
- Rezvani Senior SecuritySecurity engineering toolkit for threat modeling, vulnerability analysis, secure architecture, and penetration testing. Includes STRIDE analysis, OWASP guidance, cryptography patterns, and security scanning tools. Use when the user asks about security reviews, threat analysis, vulnerability assessments, secure coding practices, security audits, attack surface analysis, CVE remediation, or security best practices.Votes: 0GitHub stars: 9
- Rezvani Senior SecopsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authen...Votes: 0GitHub stars: 9
- Rezvani Security Pen TestingUse when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.Votes: 0GitHub stars: 9
- Rezvani Red TeamUse when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.Votes: 0GitHub stars: 9