reflective-reviewer
Self-reflection specialist that analyzes completed work for quality issues, security vulnerabilities, and improvement opportunities. Use after task completion…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-22 00:14
Security & auditing
7,312 results
tw-ecom-compliance-pdpa
E-commerce-specific PDPA (Personal Data Protection Act) compliance — member consent at signup, cookie consent, order / payment data retention, DSAR (data subject access request)…
tw-ecom-compliance-product
Comply with Taiwan product-specific regulations — Food (Act Governing Food Safety and Sanitation), Drugs (Pharmaceutical Affairs Act), Cosmetics (Cosmetic Hygiene and Safety Act), Health Foods, Alcohol (Tobacco and Alcohol Management Act), Medical Devices. Covers import permit, product registration,…
better-auth
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password…
agent-access
Retrieve login credentials, API keys, and secrets (username, password, TOTP) from the user's Bitwarden vault via aac. Use when you need credentials to sign…
sweetlink
Use when the task needs a real authenticated browser tab via SweetLink for screenshots, smoke tests, or DevTools telemetry.
business-logic-ensure-authenticated-requester
Enforce an authentication business constraint at business-logic entry points using an `ensure requester is authenticated` formalism translated into the syntax…
django-allauth
Use when implementing Django authentication - local accounts, OAuth, email verification, MFA, OIDC, django-organizations
token-security-analyzer
Analyze tokens for security risks, scams, and honeypots. Activates when users share token addresses, ask about token safety, or request honeypot/rug pull…
rodriguez-threat-hunter-playbook
Apply Roberto Rodriguez's threat hunting methodology with the Threat Hunter Playbook and HELK. Emphasizes documented hunts, open source infrastructure, and…
incident-response-fileanalyser
Static malware reverse-engineering and threat-intelligence triage for unknown files, Windows EXE/PE binaries, scripts, archives, ISOs, JavaScript, PowerShell,…
findings-browser
Use this agent when the user wants to browse, filter, summarize, or inspect existing Endor Labs findings. Findings Browser uses read-only Endor evidence to…
package-risk-summary
Use this agent when the user wants a concise risk profile for a specific package version without asking for a yes/no dependency decision. Examples: "Summarize…
securite-developpement
The English introduction is being prepared.
cyber-defense-team
Orchestrate a 4-agent cyber defense pipeline to analyze log files for threats. Use when investigating security logs, detecting anomalies in access patterns,…
supabase-rls-policy
Expert guidance for writing Supabase PostgreSQL row-level security (RLS) policies. Use when creating, modifying, or troubleshooting RLS policies for Supabase…
secrets-management
GitHub secrets and environment variables for MCP servers and CI/CD workflows
insufficient-randomness-anti-pattern
Security anti-pattern for insufficient randomness vulnerabilities (CWE-330). Use when generating or reviewing code that creates security tokens, session IDs,…
missing-security-headers-anti-pattern
Security anti-pattern for missing security headers (CWE-16). Use when generating or reviewing web application code, server configuration, or HTTP response…
self-managed-cryptography-pattern
Security pattern for systems that manage cryptographic keys themselves rather than delegating to an external service. Use when the application must store,…
openclaw-security-checker
OpenClaw security detection tool that verifies configuration security, permission isolation, network policies, log auditing, and runtime integrity based on security practice guidelines
security_audit
Scans the codebase for OWASP Top 10 vulnerabilities (Secrets, Injection, Auth) and manages SECURITY.md.
lint
Run targeted linting, formatting, and code quality checks on modified files. Use this to validate code style, type safety, security, and other quality metrics…
moai-ref-owasp-checklist
OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference. Agent-extending skill that amplifies…