Security

Use when assessing security for Python FastAPI applications.

Use when testing GraphQL APIs for common vulnerabilities including introspection exploitation, authorization bypasses, batching abuse, and denial of service.

Containerize applications with multi-stage Dockerfiles, Docker Compose orchestration, image optimization, and container security.

Security assessment methodology for Google Firebase applications, covering Firestore, Realtime Database, Cloud Storage, and Cloud Functions.

Comprehensive security testing for Next.js applications, covering App Router, RSC, Server Actions, and common deployment misconfigurations.

Build a composable CLI from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script.

Unsafe fixture skill for supply-chain audit tests.

Performs OAuth 2.0 scope minimization review to identify over-permissioned third-party application integrations, excessive API scopes, unused token grants…

Accessibility (a11y) compliance checking with WCAG 2.1 validation

Validate Azure deployments against functional, security, performance, and operational criteria before production release.

A general skill for performing security reviews and auditing codebases for vulnerabilities.

A general skill for performing security reviews and auditing codebases for vulnerabilities.

A general skill for performing security reviews and auditing codebases for vulnerabilities.

Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure.

Checks the security of a repository.

Django安全最佳实践，身份验证，授权，CSRF保护，SQL注入预防，XSS预防和安全部署配置。

Find and configure App Store Connect API credentials for asc auth.

Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery…

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API…

Exploits JWT algorithm confusion vulnerabilities where the server's token verification library accepts the algorithm specified in the JWT header rather than…

Fork the scanned repository into the configured GitHub organisation, enable private vulnerability reporting on the fork, record the scan as a git note, and…

用 Jira Cloud REST API v3 查詢與操作 issue。當使用者提到 Jira、要建立 / 更新 / 查詢 issue、跑 JQL、加 comment、轉狀態（transition / 移到 Done / In Progress）、貼一個 Jira issue 連結或 issue key（如…

Post updates and articles, fetch your own profile, and interact with LinkedIn via the v2 REST API.

Audits API implementations against the OWASP API Security Top 10 2023 (API1–API10).