orderly-api-authentication
Complete authentication guide for Orderly Network - EIP-712 wallet signatures for EVM accounts, Ed25519 message signing for Solana accounts, and Ed25519…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-19 00:11
Security & auditing
7,222 results
claude-code-safety-net
Safety net plugin that blocks destructive git and filesystem commands in Claude Code, OpenCode, Gemini CLI, Copilot CLI, and Codex
wireless-security-wifi-pentesting
Expertise in Wi-Fi penetration testing using aircrack-ng, monitor mode, WEP/WPA/WPA2/WPA3 cracking, and wireless security assessment.
authentication
Authentication and authorization including JWT, OAuth2, OIDC, sessions, RBAC, and security analysis. Activate for login, auth flows, security audits, threat…
access-review
Conducts access review and entitlement audit against CIS Controls v8 (Controls 5, 6) and NIST SP 800-53 AC family. Auto-invoked when reviewing entitlement…
purview-ediscovery
Guidance for Microsoft Purview eDiscovery (unified experience consolidating prior Standard and Premium) - identifying, preserving, collecting, reviewing,…
security-headers
Security headers configuration and best practices for ASP.NET Core Razor Pages applications. Covers CSP, HSTS, X-Frame-Options, and comprehensive security…
php-auth-audit
PHP web source code authentication mechanism audit tool. Identifies all authentication/authorization implementations from the source code and analyzes risks, outputting route-auth mapping and vulnerability analysis (including PoC and remediation recommendations).
php-cmd-audit
PHP web source code command injection audit tool. Identifies command execution sinks (exec/system/shell_exec, etc.), traces user input entering command concatenation, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-file-upload-audit
PHP web source code file upload audit tool. Identifies upload entry points and save paths, filename handling and validation logic, detects arbitrary file upload/path traversal/executable upload risks, and outputs exploitability grading, PoC, and remediation recommendations (omission prohibited).
php-symfony-audit
Symfony framework-specific security audit tool. Performs white-box static auditing of common Symfony framework mechanisms such as security.yaml, CSRF, Twig/Twig raw, expressions, and access control, and maps risks to a general vulnerability type system (AUTH/CSRF/CFG/XSS/TPL/LOGIC, etc.).
tanstack-start-security
[Hyper] Use when working on TanStack Start projects and the task involves auth, sessions, cookies, CSRF, secrets, env exposure, server functions/routes,…
architecting-security
Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF,…
exploit-xss
Cross-site scripting (XSS) vulnerability detection and exploitation. Supports reflected XSS, stored XSS, DOM-based XSS, and blind XSS testing. Use this skill…
engram-business-rules
Product and business-rule guardrails for Engram. Trigger: Any change that affects sync behavior, project controls, permissions, or memory semantics.
incu-way-security-validation
Use to validate code against common security rulesets and standards (OWASP Top 10, OWASP ASVS, OWASP API Security Top 10, CWE Top 25) by reviewing the code, a…
snyk-remediation
Use for Snyk-driven security work: run Snyk SAST/SCA scans, review findings, triage scope, or produce an approved remediation plan before fixing…
security-hardening
Use when you have a security finding (from code audit or pentest) and need to fix it correctly with secure-coding patterns, then verify the fix actually closes…
detecting-pass-the-hash-attacks
Detect Pass-the-Hash (T1550.002) attacks by analyzing NTLM authentication patterns, flagging Type 3 logons using NTLM where Kerberos would be expected, and…
implementing-dmarc-dkim-spf-email-security
Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a rejection/quarantine policy on…
performing-serverless-function-security-review
Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles,…
strk20-anonymizer-contracts
Write, review, or audit Cairo anonymizer (helper) contracts for stateless or atomic STRK20 private DeFi. Covers the privacy_invoke entry point, OpenNoteDeposit…
strk20-privacy-sdk
Build privacy wallets and key-holding backends with the Starknet Privacy SDK (@starkware-libs/starknet-privacy-sdk). Covers createPrivateTransfers wiring,…
security-owasp
Expert at securing web applications against OWASP Top 10 vulnerabilities. Covers authentication, authorization, input validation, XSS prevention, CSRF…