All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,707
- 1,322
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 20,449–20,472 of 31,707 skills
- Ios SecuritySecure iOS apps with secure storage, biometrics, and data protection. Use when implementing secure storage, Face ID/Touch ID, or data protection in iOS.Votes: 0GitHub stars: 20
- Ios PersistenceImplement local persistence with SwiftData, Core Data, and secure storage. Use when setting up SwiftData models, Core Data stacks, or local persistence in iOS.Votes: 0GitHub stars: 20
- Golang ConfigurationLoad and validate application configuration from environment variables and config files. Use when managing Go application config with environment variables or viper.Votes: 0GitHub stars: 20
- Flutter SecuritySecure Flutter token/PII storage, build-time secrets, network trust, and release hardening using OWASP Mobile practices. Use for secure storage, secret injection, certificate pinning, jailbreak/root risk, or release builds—not generic form validation, API error handling, auth-provider setup, or tests of existing security services.Votes: 0GitHub stars: 20
- Flutter Auto Route NavigationImplement typed routing, nested routes, and auth guards using auto_route in Flutter. Use when the task explicitly uses auto_route or its generated router; defer generic deep-link setup and other routing libraries.Votes: 0GitHub stars: 20
- Common OwaspOWASP Top 10 audit checklists for Web Applications (2021), APIs (2023), and Mobile (2024). Use when performing any security review, PR review, or codebase audit touching web, mobile, or API code.Votes: 0GitHub stars: 20
- Typescript SecuritySecure server-side TypeScript input, auth tokens, and injection boundaries. Use for API/request validation, sanitization, secrets, and sensitive configuration; defer client-only React form validation and generic linting.Votes: 0GitHub stars: 20
- Common Security StandardsEnforce universal security protocols for safe, resilient software. Use when implementing authentication, encryption, authorization, input validation, secret management, or any security-sensitive feature across any language or framework.Votes: 0GitHub stars: 20
- Common Dast ToolingStandardize dynamic application security testing for backend APIs, frontend web apps, and mobile clients. Covers ZAP, Nuclei, Nikto, sqlmap, ffuf, browser automation, mobile proxy interception, and AI-driven curl probes. Use when advising on or running dynamic security scans on local/staging environments.Votes: 0GitHub stars: 20
- FeishuWork with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.Votes: 0GitHub stars: 20
- Security ReviewReview a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork.Votes: 0GitHub stars: 20
- PlanTurn a sufficiently understood task into an ordered implementation plan with dependencies and verification. Orchestrate Codewhale’s native plan state; do not build a parallel planner.Votes: 0GitHub stars: 20
- ImplementCarry an authorized, defined request or approved plan through scoped edits and proportionate verification. Skill loading is not write authorization by itself.Votes: 0GitHub stars: 20
- Cli Anything TigrisCommand-line interface for Tigris object storage — wraps the official `tigris` CLI to expose buckets, objects, presigned URLs, snapshots, IAM, and scoped access keys to AI agents. Globally distributed, S3-compatible, no egress fees.Votes: 0GitHub stars: 20
- Cli Anything JumpserverStateful CLI harness for JumpServer bastion host management. Supports asset, user, permission, account, session, audit, and operations management via REST API, with both one-shot and interactive REPL modes.Votes: 0GitHub stars: 20
- cli-anything-jumpserverStateful CLI harness for JumpServer bastion host management. Supports asset, user, permission, account, session, audit, and operations management via REST API, with both one-shot and interactive REPL modes.Votes: 0GitHub stars: 20
- Security HardeningApplies OWASP Top 10, secrets management, and least-privilege principles before any code ships. Security is a build step, not an afterthought.Votes: 0GitHub stars: 20
- Code ReviewStructured code review focusing on correctness, security, and maintainability. Correctness before style. Every reviewer comment must be actionable.Votes: 0GitHub stars: 20
- Cookie DebuggingUses Chrome DevTools MCP for inspecting, debugging, and testing cookies, session state, authentication issues, and cookie consent compliance. Use when diagnosing 401/403 errors, authentication redirects, session expiration, Cookie/Set-Cookie header issues, cookie banner consent conformance, or third-party cookie/SameSite/Partitioned cookie warnings.Votes: 0GitHub stars: 20
- Hashicorp VaultManage secrets and PKI with HashiCorp Vault. Configure secret engines, authentication methods, and policies. Use when implementing centralized secrets management, dynamic credentials, or certificate management.Votes: 0GitHub stars: 20
- Vulnerability ScanningScan systems and dependencies for CVEs and security vulnerabilities. Use tools like Nessus, OpenVAS, and Qualys to identify and prioritize vulnerabilities. Use when performing security assessments, compliance scanning, or vulnerability management.Votes: 0GitHub stars: 20
- Supply Chain Attack ResponseDetect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification, and emergency response playbooks.Votes: 0GitHub stars: 20
- Sbom Supply ChainGenerate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing SLSA controls, artifact trust policies, or compliance evidence for releases.Votes: 0GitHub stars: 20
- Dependency ScanningScan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check. Identify and remediate vulnerable libraries in your software supply chain. Use when managing third-party dependencies or implementing software composition analysis.Votes: 0GitHub stars: 20