bellingcat-osint
Entry point for Bellingcat's OSINT toolkit. Maps entity types (ships, planes, people, emails, phones, photos, videos, domains, companies, social media,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-23 00:13
Security & auditing
7,330 results
gcp-gke-workload-identity
Implements Workload Identity for secure, keyless authentication between GKE pods and Google Cloud services. Use when setting up pod authentication to…
didit-case-management
Integrate Didit Case Management through the API: open, triage, assign, resolve and audit compliance investigation cases, and file FIU regulatory reports. Use…
didit-event-monitoring
Integrate Didit Event Monitoring: send non-monetary activity events to the same rule engine that scores transactions. Use when the user wants to send logins,…
didit-fraud-check
Integrate the Didit Fraud Check API and the IP Risk API. Use when the user wants to run one server-side fraud or identity risk check over an email, phone,…
didit-fraud-networks
Integrate Didit Fraud Networks (fraud ring detection) through the API. Use when the user wants to detect fraud rings, multi-accounting or identity fraud…
didit-mcp-server
Connect an AI assistant to the Didit identity platform through the Didit MCP server (Model Context Protocol). Use when the user wants to install or configure…
didit-sdk-integration
Integrate the Didit client SDKs into web and mobile apps. Use when the user wants to launch a Didit verification session in a web page (redirect, iframe, or…
multi-tenant-safety
Triggered when code involves multi-tenant isolation (TenantContext, tenantId, tenant interceptor/filter, X-Tenant-Code). Prevents security issues such as tenant privilege escalation and cross-tenant data leakage.
payment-callback-safety
Triggered when code involves payment callbacks, webhook notifications, notify_url, WeChat Pay/Alipay callback handling. Prevents payment security issues such as callback forgery, replay attacks, and amount tampering.
two-factor-authentication-best-practices
Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better…
esp32-secureboot
Plan and rehearse ESP32 Secure Boot v2 and Flash Encryption for production ESP32 firmware — SBv2 facts (RSA-3072 public-key digest burned into eFuse,…
privacy-guard
Prevents private infrastructure details (node hostnames, internal project names, local usernames and personal emails, absolute home paths, private and VPN IP…
auth0
Expert Auth0 authentication assistance covering OAuth2, OpenID Connect, JWT validation, and RBAC. Use when integrating Auth0 into web/mobile apps, configuring…
certbot
Expert Certbot SSL/TLS certificate assistance covering Let's Encrypt, ACME DNS/HTTP validation, and auto-renewal. Use when provisioning SSL certificates,…
firebase
Expert Firebase & Cloud Firestore assistance covering collection/document models, real-time listeners, security rules, and offline caching. Use when building…
passport
Expert Passport.js authentication assistance covering Local, JWT, and OAuth strategies for Node.js / Express. Use when structuring Express authentication…
security-patterns
Frontend security patterns including XSS prevention, Content Security Policy, CSRF protection, input sanitization, authentication token handling, dependency…
open-source-policy
Open source governance, security posture badges, license compliance, SBOM generation, and vulnerability management for transparency-driven development
risk-assessment-frameworks
Political risk indicators, institutional risk, corruption risk, democratic backsliding, early warning systems for Swedish political intelligence
security-by-design
Threat modeling before coding, STRIDE methodology, defense in depth, security controls in SDLC
Authentication and Credentials for Agentic Workflows
Comprehensive security patterns for managing authentication in GitHub Agentic Workflows including GitHub token types, credential storage, token rotation, least…
high-risk-review
Apply enhanced verification (CoVe-like review, security/arch/perf checks, targeted web research) for high-risk tasks or uncertainty. Use for security, infra,…
security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features.…