springboot-security
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,572 results
reporting-sensitive-encrypted-gh-issues
Encrypt, submit, scan, and decrypt age-encrypted GitHub Issues (X25519). Use when reporting vulnerabilities, scanning for encrypted issues, or decrypting…
1password
Plan, validate, and use 1Password CLI setup for secret injection and auth. Use when tasks need 1Password CLI usage, secret references, op run/read/inject, or…
authentication-authorization
Authentication and authorization patterns using Clerk and RBAC
better-auth
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password…
hardware-security
Hardware and embedded security research capabilities. Interface with JTAG debuggers, analyze SPI/I2C communications, dump and analyze firmware, support fault…
dependency-management-deps-audit
Dependency Audit and Security Analysis workflow skill. Use this skill when the user needs You are a dependency security expert specializing in vulnerability…
network-engineer
network-engineer workflow skill. Use this skill when the user needs Expert network engineer specializing in modern cloud networking, security architectures,…
network-engineer-v2
network-engineer workflow skill. Use this skill when the user needs Expert network engineer specializing in modern cloud networking, security architectures,…
security-auditor
security-auditor workflow skill. Use this skill when the user needs Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and…
vulnerability-scanner
Vulnerability Scanner workflow skill. Use this skill when the user needs Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack…
gws-alertcenter
Google Workspace Alert Center: Manage Workspace security alerts.
gws-modelarmor-create-template
Google Model Armor: Create a new Model Armor template.
gws-modelarmor-sanitize-prompt
Google Model Armor: Sanitize a user prompt through a Model Armor template.
gws-modelarmor-sanitize-response
Google Model Armor: Sanitize a model response through a Model Armor template.
recipe-audit-external-sharing
Find and review Google Drive files shared outside the organization.
recipe-triage-security-alerts
List and review Google Workspace security alerts from Alert Center.
security-audit
Comprehensive security audit covering OWASP Top 10, secrets detection, supply chain security, threat modeling, and language-specific vulnerability patterns.…
agile-scan-review
Review changed code applying security, coherence, over-engineering, scope and quality checklists. Use before committing, when opening a PR, or when reviewing…
cc-api-proxy-safety
Security specification for response determination and keyword matching in gateway/proxy/WAF/CDN middleware. Applicable to code such as proxy/gateway/waf/cdn/nginx/openresty/rewrite/redirect, to prevent technical terms such as Cloudflare, 502, bad gateway, error in normal long body text from being misjudged as upstream errors.
pipelines-security-audit
Audit a project's pipeline security settings via the Azure DevOps REST API: project settings such as job authorization scope, repository access protection, variable limits at queue time, and disabling Classic pipelines; the authentication method and idle status of service connections; and whether service connections, variable groups, secure files, agent pools, and environments are open to all…
security-alert-review
List and view Advanced Security alerts of a repository with the Azure DevOps REST API: dependency package vulnerabilities, secret leaks, and code scanning results. Filter by severity, state, and alert type, and generate an overview. Use when the user wants to view, filter, or summarize security alerts, or learn more about a specific alert. To check which repositories do not have Advanced…
security-enablement-audit
Inventory GitHub Advanced Security for Azure DevOps enablement coverage via the Azure DevOps REST API: which repositories do not yet have Secret Protection or Code Security enabled, whether push protection is on, dependency scanning and CodeQL…
litellm-guardrails-safety
Configure or review LiteLLM content safety, PII masking, prompt injection, tool permission, MCP guardrails, and call hooks. Use when a task requires modifying, denying, or restricting LLM/tool/MCP requests; MCP server registration and general virtual-key…