Security

Offensive security skill for offensive api security

Secure environment variable management with Varlock.

Use this skill for App Store Connect CLI (`asc`) usage, including install/auth setup, command families, CI/CD integration, and troubleshooting for releases…

Deploy Cloudflare Workers, Pages, and Workers-with-static-assets safely using Wrangler 4.x with versioned uploads, gradual deployments, preview/production…

After `docker buildx build --push`, always verify the image actually landed on the upstream registry.

Deploy Web Services, Private Services, Background Workers, Cron Jobs, Static Sites, PostgreSQL, and Key-Value (Redis-compatible) on Render via Blueprints…

Use when reviewing installed skills, adding third-party skills, hardening agent workflows, checking skill correctness, removing duplicate skills, or…

Perform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto.

腾讯云鼎实验室出品，Skill安全审查工具。对用户指定的skill.md文件及其配套的文档、程序、脚本等进行全面安全审计，确保引用安全

Identity provider and SSO with Authentik

Collaborative security engine with CrowdSec

Security warnings, patterns scanner, and LLM diff security reviews

Scans external skills and plugins for prompt injection, command injection, and malicious patterns before installation.

Guide for running Python code on Modal, the serverless compute platform for AI workloads, batch jobs, scheduled tasks, web endpoints, and sandboxed code…

This skill should be used when the user says a branch is "ready for review", asks to "hand off this PR", wants a "final check before opening a PR", asks "is…

認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

Expert in integrating third-party APIs with proper authentication, error handling, rate limiting, and retry logic.

Use when the user wants to validate the ScanDrix enterprise SSO flow end-to-end (cookie-domain isolation for self-hosted multi-tenant setups, SAML 2.0…

Navigate to sites that require login using credentials stored in the CF Secrets vault.

Cryptographic mistakes, hardcoded credentials, insecure defaults, and known-vulnerable dependencies.

Audit a scientific report, manuscript, or analysis in the workspace for traceability — resolving citations, flagging numbers with no source, and checking…

Audit web application source code for common vulnerability classes (XSS, SQLi, SSRF, path traversal, command injection, insecure deserialization, etc.)

Specialist prompt for an Operator subprocess running a web-exploit leaf — auth bypass attempts, RCE chains, deserialization, SSRF.

Manage content, chats, subscribers, and earnings on the Fanvue creator platform via OAuth 2.0 API.