supabase-audit-authenticated
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-15 00:40
Security & auditing
4,025 results
secrets-audit
Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks. Use…
testing-for-json-web-token-vulnerabilities
Tests JWT implementations for algorithm confusion, "none" algorithm bypass, kid/jku parameter injection, and weak secret exploitation using jwt_tool and Burp…
security-review
Security review and penetration testing: evaluate your application against OWASP Top 10, authentication security, HTTP headers, CORS, CSP, supply chain risks,…
tauri-framework-security
Guidance for Tauri v2 security model, baseline hardening, and runtime authority controls.
spring-security-configuration
Creates a Spring Security configuration class with authentication, authorization, and HTTP protection setup. Use this skill when a security configuration needs…
performing-web-application-vulnerability-triage
Triages web application vulnerability findings from DAST/SAST scanners such as Burp Suite and ZAP, using the OWASP Risk Rating Methodology to confirm true…
draft-security-advisory
Turn a vulnerability report into a publication-ready GitHub Security Advisory.
gdpr-ccpa-privacy-auditor
Audits web applications to ensure declared privacy policies match actual technical data collection practices. Use to identify discrepancies in cookie usage,…
vulnerability-scanning
Scan systems and dependencies for CVEs and security vulnerabilities. Use tools like Nessus, OpenVAS, and Qualys to identify and prioritize vulnerabilities. Use…
ssl-tls-management
Manage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure…
vulnerability-scanner
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
hashicorp-vault
Manage secrets and PKI with HashiCorp Vault. Configure secret engines, authentication methods, and policies. Use when implementing centralized secrets…
motherduck-security-governance
The introduction is being prepared. Please check back soon.
isms-audit-expert
Senior ISMS Audit Expert for internal and external information security management system auditing. Provides ISO 27001 audit expertise, security audit program…
ffuf-web-fuzzing
Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing with raw requests, auto-calibration, and result analysis
tauri-app-geolocation
Guidance for Tauri v2 geolocation plugin with permission handling and privacy controls.
cso
Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)
ciso-review
/cs:ciso-review <plan> — Risk-paranoid interrogation of any plan that touches data, compliance, or production access. Use when launching features that handle…
analyzing-ethereum-smart-contract-vulnerabilities
The introduction is being prepared. Please check back soon.
blockchain-security
Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks,…
sops-encryption
Encrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management. Use when encrypting configuration files, Kubernetes…
tauri-app-biometric
Guidance for Tauri v2 biometric plugin with authentication flow and fallback strategy.
ln-760-security-setup
Sets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.