Search Skills
Search across 54932 indexed skills
spring-security-6
Spring Security 6 (included in Spring Boot 3) removes the deprecated WebSecurityConfigurerAdapter and introduces a component-based configuration appro...
senior-security
Complete toolkit for senior security with modern tools and best practices. This skill provides three core capabilities through automated scripts: pyth...
django-security
Comprehensive security guidelines for Django applications to protect against common vulnerabilities. Setting up Django authentication and authorizatio...
laravel-security
Comprehensive security guidance for Laravel applications to protect against common vulnerabilities. Adding authentication or authorization Handling us...
perl-security
Comprehensive security guidelines for Perl applications covering input validation, injection prevention, and secure coding practices. Handling user in...
springboot-security
Use when adding auth, handling input, creating endpoints, or dealing with secrets. Adding authentication (JWT, OAuth2, session-based) Implementing aut...
senior-security
Security engineering tools for threat modeling, vulnerability analysis, secure architecture design, and penetration testing. --- Threat Modeling Workf...
information-security-manager-iso27001
Implement and manage Information Security Management Systems (ISMS) aligned with ISO 27001:2022 and healthcare regulatory requirements. --- Trigger Ph...
cloud-security-audit
云安全审计是评估云环境安全性的重要环节。本技能提供云安全审计的方法、工具和最佳实践，涵盖AWS、Azure、GCP等主流云平台。 检查项目： IAM策略配置 用户权限 角色权限 访问密钥管理 检查项目： 安全组配置 网络ACL VPC配置 流量加密 检查项目： 数据加密 密钥管理 备份策略 数据分类...
api-security-testing
API安全测试是确保API接口安全性的重要环节。本技能提供API安全测试的方法、工具和最佳实践。 测试项目： Token有效性验证 Token过期处理 权限控制 角色权限验证 测试项目： 参数类型验证 数据长度限制 特殊字符处理 SQL注入防护 XSS防护 测试项目： 工作流验证 状态转换 并发控制...
container-security-testing
容器安全测试是确保容器化应用安全性的重要环节。本技能提供容器安全测试的方法、工具和最佳实践，涵盖Docker、Kubernetes等容器技术。 检查项目： 基础镜像漏洞 依赖包漏洞 镜像配置 敏感信息 检查项目： 容器权限 资源限制 网络隔离 文件系统 检查项目： Kubernetes配置 服务账户...
axiom-security
You MUST use this skill for ANY keychain, encryption, passkey, app integrity, file protection, or code signing work. | Symptom / Task | Reference | |-...