All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,842
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 18,241–18,264 of 31,842 skills
- Password GenGenerate high-entropy passwords and audit existing credentials for security. 支持安全密码生成、强度评估及加密规范检查。Use when creating new accounts or auditing system security.Votes: 0GitHub stars: 12
- PasskeyPasskey passwordless authentication reference. Synced FIDO2 credentials via iCloud/Google. Covers frontend registration and login code, conditional UI autofill, feature detection, platform support matrix, UX best practices, database schema, and password-to-passkey migration strategy.Votes: 0GitHub stars: 12
- OidcOpenID Connect (OIDC) authentication reference. Identity layer on OAuth 2.0. Covers Authorization Code + PKCE flow step by step, ID Token JWT claims, UserInfo endpoint, discovery, Python authlib and Node.js openid-client implementations, and JWT validation.Votes: 0GitHub stars: 12
- LoginStore, retrieve, and manage login credentials securely using bash and Python with local encryption. Use when saving website logins, API keys,Votes: 0GitHub stars: 12
- License PickerOpen source license reference — SPDX identifiers, permissive vs copyleft comparison, license compatibility matrix, patent clauses, and compliance scanning toolsVotes: 0GitHub stars: 12
- HtpasswdGenerate htpasswd entries for Apache/Nginx basic auth password management. Use when creating credentials, managing password files, or verifying users.Votes: 0GitHub stars: 12
- HotpHOTP (RFC 4226) HMAC-based one-time password reference. Counter- based OTP for hardware tokens. Covers algorithm step-by-step, Python implementation from scratch, pyotp/otpauth libraries, counter synchronization, resync protocol, look-ahead window, and security considerations vs TOTP.Votes: 0GitHub stars: 12
- GpgGPG (GNU Privacy Guard) encryption and signing reference. Covers key generation (Ed25519/RSA), export/import, keyservers, file encryption (symmetric + asymmetric), git commit signing, detached signatures, gpg-agent caching, SSH via GPG, and pass password manager.Votes: 0GitHub stars: 12
- DpaData Processing Agreement reference — GDPR Article 28, processor obligations, sub-processor management, and cross-border transfers. Use when drafting or reviewing DPAs with vendors.Votes: 0GitHub stars: 12
- ConsentBuild cookie consent banners and track opt-in compliance status. Use when implementing GDPR consent, auditing cookies, generating privacy banners.Votes: 0GitHub stars: 12
- ComplianceTrack compliance requirements and generate audit trail reports. Use when auditing controls, checking policies, generating audit trails.Votes: 0GitHub stars: 12
- Civil ServicePublic administration reference — civil service systems, government standards, e-government maturity, FISMA compliance, and FOI processVotes: 0GitHub stars: 12
- Bytesagain License PickerOpen source license reference — SPDX identifiers, permissive vs copyleft comparison, license compatibility matrix, patent clauses, and compliance scanning toolsVotes: 0GitHub stars: 12
- BindBIND 9 DNS server reference. Covers named.conf configuration, zone files, record types, split DNS views, DNSSEC signing and validation, Response Policy Zones, rate limiting, security hardening, and troubleshooting with dig/rndc.Votes: 0GitHub stars: 12
- AuditdLinux Audit Framework reference. auditctl rules for file watches and syscall auditing, auditd.conf configuration, ausearch log queries, aureport summaries, audit.log format, CIS/PCI-DSS compliance rules, and audit tools.Votes: 0GitHub stars: 12
- Cortex XsoarCortex XSOAR integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cortex XSOAR data.Votes: 0GitHub stars: 272
- Contrast SecurityContrast Security integration. Manage data, records, and automate workflows. Use when the user wants to interact with Contrast Security data.Votes: 0GitHub stars: 272
- Continuum Security SlneContinuum Security SLNE integration. Manage data, records, and automate workflows. Use when the user wants to interact with Continuum Security SLNE data.Votes: 0GitHub stars: 272
- Security And HardeningHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.Votes: 0GitHub stars: 3
- Code Review And QualityConducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensions before it enters the main branch.Votes: 0GitHub stars: 3
- Typescript Security ReviewProvides comprehensive security review capability for TypeScript and Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure. Use when performing security audits, before deployment, reviewing authentication/authorization implementations, or ensuring OWASP compliance for Express, NestJS, and Next.js. Triggers on "security review", "check for security issues", "TypeScript security audit".Votes: 0GitHub stars: 3
- Security SentinelUse this agent when you need to perform security audits, vulnerability assessments, or security reviews of code. This includes checking for common security vulnerabilities, validating input handling, reviewing authentication/authorization implementations, scanning for hardcoded secrets, and ensuring OWASP compliance. <example>Context: The user wants to ensure their newly implemented API endpoints are secure before deployment.\\nuser: \"I've just finished implementing the user authentication e...Votes: 0GitHub stars: 3
- Security ReviewComprehensive security audit for code changes. Use this skill when implementing authentication, authorization, user input handling, API endpoints, secrets/credentials, payment features, or file uploads. Provides security checklists, vulnerability patterns, and remediation guidance. Integrates with implement-phase as a security quality gate.Votes: 0GitHub stars: 3
- Security PracticesOWASP Top 10, authentication, and secure coding practicesVotes: 0GitHub stars: 3