Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

linnefromice0

보안

Genie Auth Integrator

Implement user authentication (email/password, OTP, OAuth via relay proxy) for web apps. Use this skill when the application needs login, signup, OAuth, session management, or protected routes. Triggers on requests for login, signup, sign-out, user accounts, OAuth, or access control. Powered by self-hosted Supabase Auth + OAuth Relay.

Linrstudio0

보안

Security Best Practices

Security guidelines, authentication, authorization, input validation, and secure coding practices for platform-go

linskybing0

보안

Jwt Auth

JWT authentication implementation with bcrypt, refresh tokens, and rate limiting. Use for auth-related development, login, registration, or token handling.

linsomniac0

보안

Santa Method

Multi-agent adversarial verification with convergence loop. Two independent review agents must both pass before output ships.

linnefromice0

보안

Security Review

linnefromice0

보안

Yaml Config Validator

Yaml Config Validator - Auto-activating skill for DevOps Basics. Triggers on: yaml config validator, yaml config validator Part of the DevOps Basics skill category.

LINYF5100

보안

Owasp Security

Security code review using OWASP Top 10:2025 standards. Use when reviewing auth code, payment logic, user input handling, or when someone says "security review", "check for vulnerabilities", "OWASP check", or "is this code secure?".

lioartoil0

보안

Owasp Llm Top10

Security audit for LLM and GenAI applications using OWASP Top 10 for LLM Apps 2025. Assess prompt injection, data leakage, supply chain, and 7 more critical vulnerabilities.

lionheartapp0

보안

Security Architect

Expert security architecture including threat modeling, authentication, encryption, and compliance

ljchg12-hue0

보안

Security Best Practices

OWASP-based secure programming practices. Use when writing or reviewing code handling auth, crypto, user input, secrets, or API endpoints. Consult proactively during reviews and planning.

lklimek0

보안

Bulletproof Security

Guidelines for implementing Authentication, Authorization (RBAC), and securing tokens following Bulletproof React. Use when implementing login flows, protecting routes, managing JWTs, or adding role-based access control.

llascola0

보안

Owasp Security

OWASP security guidelines and best practices for developing secure applications. Use this when implementing authentication, authorization, data validation, encryption, or security-sensitive features.

llascola0

보안

Goldcard Iam Develop

金卡身份中心开发者指引

LLLLimbo0

보안

Audit Security Events

Performs security audits and SIEM analysis across multi-cloud environments, detects threats, and generates compliance reports. Use when conducting security assessments, monitoring for threats, or ensuring regulatory compliance.

lloydchang0

보안

Compliance Validation

Validates pull requests against regulatory, security, and organizational compliance requirements. Ensures changes meet GDPR, HIPAA, PCI-DSS, and other compliance frameworks.

lloydchang0

보안

Generate Compliance Report

Generates compliance reports and audits for security standards across multi-cloud environments. Use when ensuring regulatory compliance, conducting security audits, or preparing for certifications.

lloydchang0

보안

Iam Migration Validation

Automated post-migration validation for iam-migration (ETBC to IAM). Use when designing or executing verification that legacy ETBC users can log in to the portal, permissions are consistent, and app/menu mappings are correct across iam-management-service, iam-auth-center-service, APISIX, and portal-front.

LLLLimbo0

보안

Openswe Code Review

Advanced code review using OpenSWE Deep Agents with sandbox execution for security analysis, performance testing, and automated fixes.

lloydchang0

보안

Compliance Check

Start and monitor compliance checks for SOC2, GDPR, HIPAA standards. Use when verifying infrastructure compliance, preparing for audits, or ensuring regulatory requirements are met.

lloydchang0

보안

Env Validation

Environment variable schema validation at startup with typed access

lmaero0

보안

Security Review

Reviews IaC, IAM policies, Kubernetes RBAC, and application configs for security posture. Covers least privilege, secrets management, encryption, audit logging, supply chain. Use when assessing IAM, secrets, encryption, or security posture of AWS/K8s workloads.

LongTheta0

보안

Supply Chain Sbom

Software supply chain and SBOM assessment. Evaluates dependency pinning, SBOM generation, provenance, attestation, vulnerability scanning, and signed artifacts. Aligned to DoD DevSecOps, FedRAMP, NIST 800-53 SA-12/SI-7. Use for federal-checklist, gitops-audit, repo-assess.

LongTheta0

보안

Security Review

LongTheta0

보안

Esp Idf Ota Updates

Use when implementing OTA firmware updates for ESP32, setting up OTA partition schemes, configuring rollback, secure OTA with signing, or troubleshooting OTA failures

Loulen0

보안

Security Auditor

Security vulnerability detection and remediation expert for applications and infrastructure

louloulin0

보안

Setup Credentials

Set up and install credentials for an agent. Detects missing credentials from agent config, collects them from the user, and stores them securely in the encrypted credential store at ~/.hive/credentials.

Lovuwer0

보안

Create Auth Skill

A skill to create auth service for new applications.

LucaNerlich0

보안

Authentication Management

Manages authentication flow for MutuaPIX (Laravel Sanctum + Next.js), handles mock mode security, and validates environment configurations

Lucasdoreac0

보안

Multi-Tenant Development Cycle

Multi-tenant development cycle orchestrator following Ring Standards. Auto-detects the service stack (PostgreSQL, MongoDB, Redis, RabbitMQ, S3) and service type (plugin vs product), then executes a gate-based implementation using tenantId from JWT for database-per-tenant isolation via lib-commons v4 tenant-manager sub-packages (postgres.Manager, mongo.Manager). For plugins: includes mandatory M2M credential retrieval from AWS Secrets Manager via lib-commons v4 secretsmanager package (per-tenant authentication with product APIs). MUST update lib-commons v4 first; lib-auth v2 depends on it. Both are required dependencies. Each gate dispatches ring:backend-engineer-golang with context and section references. The agent loads multi-tenant.md via WebFetch and has all code examples.

LucasMalessa0

보안 Skills | Skills Pool