auth-assessment
Assess mobile app authentication and authorization mechanisms against MASVS-AUTH controls and MASTG tests. Use when reviewing login flows, biometric auth,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,265 results
masvs-checklist
Generate a MASVS v2 compliance checklist with MASTG test mappings for a mobile app. Use when you need a complete security checklist, compliance tracking…
security
Security guidelines for API route development
ionic-biometric-auth
Add Face ID / Touch ID / fingerprint authentication to an Ionic Capacitor app via @aparajita/capacitor-biometric-auth. Trigger when adding biometric login, app…
security-check
Backend security auditor for authentication, authorization, token handling, payment abuse, file uploads, data leaks, injection, and broken access control.…
domain-primitives-and-always-valid
Based on the design principles of Domain Primitives and the Always-Valid Domain Model, support design and implementation that guarantees the type safety and invariants of the domain model. Prevent the abuse of primitive types, and provide construction-time validation, immutability, and self-containment...
ratchet
Bootstrap or retrofit a project for IEC 62304 / ISO 14971 development under guardrails. Use when setting up a new regulated project, adopting guardrails in an…
siem-rule-generator
Generate siem rule generator operations. Auto-activating skill for Security Advanced. Triggers on: siem rule generator, siem rule generator Part of the…
security-threat-model
Write a STRIDE-based threat model for a service or feature. Use when asked to produce a threat model, document security risks, identify attack vectors, assess…
implementing-alert-fatigue-reduction
Implements strategies to reduce SOC alert fatigue by tuning detection rules, consolidating duplicate alerts, implementing risk-based alerting, and measuring…
implementing-privileged-access-workstation
Design and implement Privileged Access Workstations (PAWs) using the tiered administration model, with device hardening, device compliance enforcement via…
investigating-insider-threat-indicators
Investigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policy violations, and pre-departure behaviors using…
performing-alert-triage-with-elastic-siem
Perform systematic alert triage in Elastic Security SIEM—classifying, prioritizing, and investigating alerts using Kibana, ES|QL queries, and ECS-normalized…
conflicting-laws-mgmt
Guides managing conflicting privacy requirements across jurisdictions. Covers data localisation vs transfer freedom, consent standards variation, age…
coppa-compliance
Implements Children's Online Privacy Protection Act (COPPA) compliance under 16 CFR Part 312. Covers verifiable parental consent methods including signed…
cross-jurisdiction-cookies
Implementing cookie compliance across multiple jurisdictions including EU ePrivacy Directive, UK PECR, US California CCPA/CPRA opt-out model, and Brazil LGPD.…
dpia-stakeholder-consult
Guides data subject and stakeholder consultation requirements during Data Protection Impact Assessments under GDPR Article 35(9). Covers consultation planning,…
gdpr-one-stop-shop
Guides the GDPR Article 56 one-stop-shop mechanism for determining lead supervisory authority in cross-border processing. Covers main establishment…
hipaa-research-privacy
Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i). Covers IRB and Privacy Board waivers of…
octopus-security-audit
OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews
vaultcontext
Store, version, compare for equality, archive, restore and explicitly share arbitrary encrypted files in personal or project VaultContext vaults through a CLI.…
aml-compliance
This skill should be used when the user asks about AML compliance, anti-money laundering, KYC, CDD, EDD, PEP screening, sanctions screening, transaction…
information-security-engineer
Guides information security engineering—implementing and operating security controls, identity and access systems, encryption and secrets management, security…
red-team-specialist
Guides authorized enterprise adversary simulation and red team operations—campaign planning, threat-informed objectives, MITRE ATT&CK–framed TTP selection,…