ivangrynenko-cursorrules-drupal
Drupal security and coding rules from Ivan Grynenko's cursorrules, organised by OWASP Top 10 (2021) category: authentication, access control, injection (SQL,…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-18 00:12
Security & auditing
7,209 results
dotnet-security-owasp
Securing .NET code or reviewing for vulnerabilities. OWASP Top 10 mitigations, pattern warnings.
risk-manager
Risk management specialist who assesses, analyzes, and mitigates financial and operational risks with expertise in quantitative risk modeling, compliance…
privacy-compliance
Use this skill when implementing GDPR or CCPA compliance, designing consent management, conducting DPIAs, or managing data processing agreements. Triggers on…
dv-security
Security-role assignment, user access, application users, business units, and admin self-elevation in Dataverse environments. Use when the user wants to give…
owasp-infrastructure
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
manage-firewall
Inspects and configures the web application firewall (WAF) in front of a Power Pages production site. Lists the current state, recommends enabling protection…
manage-headers
Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin…
azure-external-attack-surface-management
Expert knowledge for Azure External Attack Surface Management development including configuration. Use when filtering EASM inventory by ASN, domains, hosts,…
multi-agentic-threat-model
Comprehensive threat modeling for multi-agent systems using CSA MAESTRO 7-layer framework and OWASP Multi-Agentic System Threat Modeling Guide v1.0.…
prompt-injection-test
Test LLM-integrated applications against known prompt injection techniques, evasion methods, and attack intents using the Arcanum PI Taxonomy. Use when…
authentication-patterns
OAuth 2.0, JWT, SSO, MFA, NextAuth/Clerk/Supabase Auth implementation patterns
auth-ops
Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth. Use for: authentication,…
thermo-nuclear-review
Comprehensive security and correctness audit of a branch's changes. Use for thermo nuclear, thermonuclear, or deep review requests, or branch/PR diff audits…
prove
Prove integration. Manage data, records, and automate workflows. Use when the user wants to interact with Prove data.
security-checklist
Security rules for code generation including secret handling, credential storage, and environment files. Follow when generating code that handles secrets,…
cryptography
Use this skill when implementing encryption, hashing, TLS configuration, JWT tokens, or key management. Triggers on encryption, hashing, bcrypt, AES, RSA, TLS…
auditing-kubernetes-rbac-privilege-escalation
Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and…
openharmony-security-review
Use when reviewing OpenHarmony C++ system service code for security vulnerabilities, particularly IPC handlers, multithreaded components, or code handling…
iac-security-review
Security review of Infrastructure-as-Code (Terraform, Kubernetes, CloudFormation). Use when reviewing IaC files for misconfigurations, overpermissioning,…
misttrack-skills
Use MistTrack OpenAPI for cryptocurrency address risk analysis, AML compliance detection, and transaction tracking. MistTrack is an anti-money laundering tracking tool developed by SlowMist, supporting risk scoring, label queries, transaction investigation, and other functions for on-chain addresses and transactions on mainstream chains such as BTC, ETH, TRX, and BNB.
tisax
Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA assessment regime that OEMs like VW, BMW,…
cryptography
Cryptanalysis techniques — lattice attacks, padding oracles, weak-RNG exploitation, signature forgery, secret-sharing recovery.
strix-ci-setup
Wire Strix security scanning into CI/CD — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks…