security specialist

Security Specialist Skills

🤖 Agent & MCP Enhancements

This Skill supports and recommends use with specific agent roles and MCP tools for best results.

Recommended Agent Roles

• Security Auditor: See AGENTS.md。
  • This role has a "zero trust" and "attacker perspective", and can proactively discover potential risks.
  • When enabled, AI will enforce the OWASP security checklist.

Recommended MCP Tools

• Git MCP: Used to scan for sensitive information leaks in historical commits.
• Filesystem MCP: Used to check file permissions and .gitignore configuration.

---

Provides comprehensive security protection to ensure applications comply with security standards and regulations.

Included Skill Modules

1. Security Requirements

• Core Value: Identify security risks during the design phase.
• Key Technologies: Threat modeling, STRIDE analysis, security user stories.
• Use Cases: Security review of new features, architecture design.

2. Authentication

• Core Value: Implement secure and reliable user identity verification.
• Key Technologies: JWT, OAuth2, OIDC, Session management.
• Use Cases: Login and registration system development, third-party login integration.

3. GDPR Compliance

• Core Value: Ensure data processing complies with privacy regulations such as GDPR.
• Key Technologies: Data minimization, right to erasure implementation, data encryption.
• Use Cases: Overseas application development, privacy compliance auditing.

How to Use

• Login Design: "Please refer to Authentication, and help me design a secure JWT login flow."
• Compliance Check: "Please check whether my database field design complies with GDPR requirements."