安全性
2492 skills in 測試與安全 > 安全性
kotlin-ktor
Ktor framework - routing, authentication, WebSockets
agentuity-cli-cloud-redis-show
Show Redis connection URL. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-db-get
Show details about a specific database. Requires authentication. Use for Agentuity cloud platform operations
aws-s3-management
Configure S3 buckets with security, lifecycle, and replication policies
agentuity-cli-cloud-vector-stats
Get statistics for vector storage. Requires authentication. Use for Agentuity cloud platform operations
security-auditor
Expert in web security, XSS prevention, CSRF protection, Content Security Policy, authentication patterns, secure data handling, and dependency vulnerability scanning
account-security-validation
Validate account security and authentication protocols.
agentuity-cli-auth-whoami
Display information about the currently authenticated user. Requires authentication. Use for managing authentication credentials
code-review
Review code for quality, bugs, security issues, and best practices.Use this skill when the user asks for code review, code analysis, or wants feedback on their code.
agentuity-cli-cloud-sandbox-run
Run a one-shot command in a sandbox (creates, executes, destroys). Requires authentication. Use for Agentuity cloud platform operations
security-prompts
Library of battle-tested security prompt templates for secure feature implementation. Use when implementing forms, endpoints, authentication, authorization, file uploads, or conducting security reviews. Triggers include "security prompt", "secure form", "RBAC", "threat model", "STRIDE", "admin endpoint", "file upload", "security testing", "code review", "OWASP".
rails-context-verification
Systematic verification of codebase context before code generation to prevent assumption bugs. Trigger keywords: context, assumptions, helpers, authentication, current_user, verify, validate context
pki-and-x509
Expert guidance for Public Key Infrastructure (PKI) and X.509 certificates including certificate structure, DN parsing, CSR generation, certificate signing, revocation (CRL/OCSP), key management, and OpenSSL commands. Use this when working with digital certificates, certificate authorities, or cryptographic key management.
rails-error-prevention
Comprehensive checklist and prevention strategies for common Ruby on Rails errors. Use this skill BEFORE writing any Rails code to prevent ViewComponent template errors, ActiveRecord query mistakes, method exposure issues, N+1 queries, and other common Rails pitfalls. Trigger keywords: errors, bugs, security, validation, prevention, pitfalls, debugging, exceptions, error handling
enforce-security-vigilance
Enforce continuous security vigilance and threat monitoring.
agentuity-cli-cloud-secret-list
List all secrets. Requires authentication. Use for Agentuity cloud platform operations
better-auth
Build authentication systems for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, and RBAC. Self-hosted alternative to Clerk/Auth.js.IMPORTANT: Requires Drizzle ORM or Kysely for D1 - no direct D1 adapter. v1.4.0 (Nov 2025) adds stateless sessions, ESM-only (breaking), JWT key rotation, SCIM provisioning. v1.3 adds SSO/SAML, multi-team support.Use when: self-hosting auth on Cloudflare D1, migrating from Clerk, implementing multi-tenant SaaS, or troubleshooting D1 adapter errors, session serialization, OAuth flows, TanStack Start cookie issues, nanostore session invalidation.
darkit-gin
基于 gin-gonic/gin 的企业级 Web 框架增强版,提供开箱即用的 JWT 认证、SSE 实时通信、缓存管理、OpenAPI 文档生成等企业级功能。涵盖选项式路由配置、统一响应格式、中间件管理、安全加固、性能优化等完整开发能力。
agentuity-cli-cloud-keyvalue-list-namespaces
List all keyvalue namespaces. Requires authentication. Use for Agentuity cloud platform operations
backend-development
Backend development - APIs, authentication, business logic