স্কিল খুঁজুন
আপনার এজেন্টের জন্য উপযুক্ত সক্ষমতা খুঁজে নিন।
rpt-permissions
Configure RPT token exchange and permission-based authorization for affolterNET.Web.Bff. Use when setting up Keycloak permissions, resource policies, or fine-grained access control.
authentication
Authentication patterns for JWT, sessions, OAuth, MFA, and secure auth flows. Trigger: When implementing authentication, when setting up JWT tokens, when building login flows, when integrating OAuth providers, when implementing password reset, when adding MFA.
keycloak-administration
Provides comprehensive KeyCloak administration guidance including realm management, user/group administration, client configuration, authentication flows, identity brokering, authorization policies, security hardening, and troubleshooting. Covers SSO configuration, SAML/OIDC setup, role-based access control (RBAC), user federation (LDAP/AD), social login integration, multi-factor authentication (MFA), and high availability deployments. Use when configuring KeyCloak, setting up SSO, managing realms and clients, troubleshooting authentication issues, implementing RBAC, or when users mention "KeyCloak", "SSO", "OIDC", "SAML", "identity provider", "IAM", "authentication flow", "user federation", "realm configuration", or "access management".
draconian-rls-audit
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
supabase-email-auth
This skill should be used when implementing Supabase email/password authentication in Next.js applications. Automates the complete setup including client/server utilities, login/register pages, auth callback handling, middleware protection, and email configuration. Handles common errors like PKCE flow issues, cookie management, and admin role verification.
userinfo-endpoint-reviewer
Review test cases for UserInfo Endpoint. Covers access token validation, Bearer token handling, sub claim consistency, scope-based claims, and signed responses per OIDC Core 1.0 Section 5.3.
ic-validate
Validate IC10 code for correctness. Use when user wants to check IC10 code for errors, constraint violations, or best practice issues before using it in Stationeers.
web-security-standards
Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions
rust-backend-auth
Implements authentication and authorization for Rust backend services using JWT, password hashing, sessions, and middleware patterns. Use when building auth systems, implementing login/logout, protecting routes, hashing passwords, or working with JWT tokens in Axum/Tower applications.
dev-docs-workflow
Dev docs system for maintaining context across sessions
scope-claims-reviewer
Review test cases for Scope and Claims handling. Covers openid scope requirement, standard scopes (profile, email, address, phone), claims request parameter, and claim types per OIDC Core 1.0 Section 5.4 and 5.5.
global-validation
Validate inputs and preconditions before work begins using symmetric validation across layers, allowlist thinking, and contextual business rules with auditability. Use this skill when writing input validation, form handling, API request validation, or domain logic checks. Applies to all boundary validation requiring structured error responses, edge-case coverage, sanitization, escaping, and contract tests ensuring consistent validation across clients, APIs, background jobs, and CLIs.
security-review
보안, 보안 리뷰, 보안 검토, 취약점, 보안 분석 - Use when reviewing code for security vulnerabilities, designing authentication/authorization, or ensuring secure architecture. Provides systematic security analysis based on OWASP guidelines.
pentest-toolkit
AI-Powered Security Testing Toolkit - Professional penetration testing scripts for discovering vulnerabilities, analyzing application structure, and generating context-aware security tests. All scripts return structured JSON for agent consumption.
ask-details
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
rls-test-patterns
RLS policy testing patterns for Supabase - automated test cases for Row Level Security enforcement, user isolation verification, multi-tenant security, and comprehensive security audit scripts. Use when testing RLS policies, validating user isolation, auditing Supabase security, verifying tenant isolation, testing row level security, running security tests, or when user mentions RLS testing, security validation, policy testing, or data leak prevention.
issue-review
Audits created issue drafts for quality, clarity, and template compliance. Ensures alignment with SSOT via active-reconnaissance and ssot-verification, while enforcing core agent values.
pix-validation-expert
Validates PIX key requirements for MutuaPIX platform, ensuring email used for login matches PIX key email for payment processing
testing-api-authentication
Test FastAPI endpoints with Clerk JWT authentication while avoiding common environment, token expiry, and claim validation pitfalls. Use when tester-agent needs to validate API authentication, run end-to-end tests with real tokens, or troubleshoot JWT verification issues.
