security
Security scan: dependency audits, SAST analysis, and secret detection. Detects project type, runs available security tools, classifies findings by severity,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,492 results
security-review
Review a diff for concrete security risks across injection, authn/authz, secrets, supply chain, infrastructure, and business logic.
dev-rules
Use when writing code, making git operations, handling secrets, reviewing PRs, or working with dependencies. Enforces git safety, security best practices, PR…
migrating-to-scalekit-auth
Plans and executes a safe, incremental migration from any existing auth system to Scalekit's full-stack auth platform. Use when the user asks to migrate…
add-mcp-oauth
Adds MCP OAuth so an agent can protect the user's MCP server. Use when the user wants MCP OAuth or to protect their MCP server. It does not add API keys or…
implementing-scalekit-django-auth
Implements Scalekit authentication in a Django project using the patterns from scalekit-inc/scalekit-django-auth-example. Handles login, OAuth callback, Django…
implementing-scalekit-go-auth
Guides Go developers implementing Scalekit authentication in Gin-based web apps using scalekit-sdk-go. Use when the developer mentions Scalekit, enterprise…
implementing-scalekit-laravel-auth
Implements Scalekit authentication in a Laravel app using the patterns from scalekit-inc/scalekit-laravel-auth-example. Handles login, OAuth callback, Laravel…
implementing-scalekit-springboot-auth
Guides Java developers integrating Scalekit OIDC authentication into Spring Boot 3.x apps. Use when the developer mentions Scalekit, enterprise SSO, OIDC…
mcp-auth-expressjs-scalekit
Add Scalekit OAuth authentication to an Express.js MCP server (TypeScript). Supports two modes: scaffold a new server from scratch, or retrofit an existing…
mcp-oauth-fastmcp
Add OAuth 2.1 authorization to FastMCP servers using Scalekit provider plugin. Use when building FastMCP servers, when users mention FastMCP authentication,…
migrating-to-scalekit-auth
Plans and executes a safe, incremental migration from any existing auth system to Scalekit's full-stack auth platform. Use when the user asks to migrate…
security-skill
Application security patterns - authentication, secrets management, input validation, OWASP Top 10. Use when: auth, JWT, secrets, API keys, SQL injection, XSS,…
cso
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill…
github-actions-hardening
Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and…
feishu-user-auth
Use when the user mentions scenarios such as "Feishu authorization", "OAuth", "Device Flow", "open_id", "repeated authorization pop-ups", "token reuse", "supplementing authorization scopes", or "where is the Feishu token stored", and needs to reuse an existing local user token, only supplement missing scopes, or troubleshoot the actual storage location of the token.
ai-code-generation-guardrails
Autonomous AI code generation safety guardrail register: static AST analysis, forbidden import filters, and zero-day vulnerability checks.
binary-diff
Cross-version binary symbol migration: diff updated binaries, recover function names without PDBs, and propagate annotations after software updates using…
bugcrowd-reporting
Bugcrowd-specific reporting tactics complementing report-writing
case-review
Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage,…
check-identity-pack
Run an AFP 100-point or AUSTRAC safe-harbour identity check over a set of documents, and report exactly what's missing. Use when the user asks to check…
cis-benchmarks
Audit and remediate CIS benchmark violations.
cloud-iam-deep
Cloud IAM red-team attack chain across AWS, Azure, GCP
container-scanning
Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools.