clerk-auth
Clerk authentication patterns and integration with Convex. Use when implementing sign-in/sign-out, protected routes, user profile sync, or role-based access control.
Clerk authentication patterns and integration with Convex. Use when implementing sign-in/sign-out, protected routes, user profile sync, or role-based access control.
Supabase RLS(Row Level Security) ์ ์ฑ ์์ฑ ๊ฐ์ด๋. ๋ณด์ ์ ์ฑ , ๊ถํ ์ ์ด ๊ด๋ จ ์ง๋ฌธ ์ ์ฌ์ฉ.
Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data.
Security review of application code, dependencies, configurations, and architecture. Covers OWASP Top 10, dependency scanning, secret management, authentication patterns, and API security. Use this skill when reviewing security of code, auditing dependencies for vulnerabilities, checking configuration security, assessing API endpoints, or answering security concerns about implementations. Triggers on "security", "audit", "vulnerability", "CVE", "OWASP", "injection", "XSS", "CSRF", "authentication security", "authorization flaw".
Security pattern for managing cryptographic keys throughout their lifecycle. Use when integrating cryptography requiring key generation, storage, distribution, or usage. Provides guidance on key confidentiality, integrity, configuration protection, and key information handling. Foundation for Cryptography as a service and Self-managed cryptography patterns.
expo-secure-store patterns for sensitive data. Use when storing tokens and credentials.
Security Auditor Agent. ๋ณด์ ๊ฐ์ฌ, ์ทจ์ฝ์ ๋ถ์, ์ปดํ๋ผ์ด์ธ์ค ๊ฒํ ๋ฅผ ๋ด๋นํฉ๋๋ค. ๋ณด์, ๊ฐ์ฌ(audit), ์ทจ์ฝ์ , ์ปดํ๋ผ์ด์ธ์ค ๊ด๋ จ ์์ฒญ ์ ์ฌ์ฉ๋ฉ๋๋ค.
Comprehensive guide to implementing Single Sign-On with SAML 2.0 and OpenID Connect for enterprise authentication
Detect hardcoded secrets, API keys, passwords, and credentials in source code. Security audit for leaked secrets. Works across all languages. Use when user asks about security issues or secret detection.
Classting ์๋น์ค์ access_token์ ํ๋ํฉ๋๋ค. ai.classting.net์ ์ ์ํ์ฌ OIDC ๋ก๊ทธ์ธ ํ JWT ํ ํฐ์ ๋ฐํํฉ๋๋ค. Classting API ํธ์ถ, e2e ํ ์คํธ, ์ธ์ฆ์ด ํ์ํ ์์ ์ ์ฌ์ฉํฉ๋๋ค.
Ktor HTTP Client - use for backend API calls, REST requests, serialization, authentication, and client-server communication
ๅบไบNFRๅฎๅ จ่ฆๆฑ๏ผ็ๆSTRIDE/OWASPๅจ่ๆจกๅๅๆต่ฏๅบๆฏใL3็บงๅซไธ็จ๏ผๅฝ่ฎพ่ฎกๅ้ๆฑ็กฎ่ฎคๅไฝฟ็จใ
Authentication system design and implementation guidance with Python examples using strict typing. Use when: (1) Designing authentication flows (signup, login, logout, refresh), (2) Selecting between session vs token-based auth, (3) Designing JWT structure and claims, (4) Implementing OAuth 2.0 flows, (5) Setting up multi-service authentication patterns, (6) Creating password reset and email verification flows, (7) Implementing role-based access control (RBAC), (8) Creating security checklists for auth systems, (9) Planning frontend/backend auth integration. All examples follow Python typing standards and security best practices.
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.
Implement Rails 8 built-in authentication with has_secure_password, session cookies, and the Authentication concern. Use when building login/logout functionality, session-based auth, or user authentication systems in Rails 8+ applications.
Minimum security controls every service must implement: authentication/authorization, input validation, secrets management, security headers, dependency security, audit logging, and operational guardrails
Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates actionable remediation reports with CVSS severity scoring.
Adds BetterAuth authentication to Apso backends. Handles entity setup, code generation, auto-fixes, and verification. Triggers when user needs to add authentication, setup auth, or integrate BetterAuth.
**SECURITY SHIELD**: '๋ณด์', '์ธ์ฆ', '๋ก๊ทธ์ธ', '๋น๋ฐ๋ฒํธ', 'JWT', 'ํ ํฐ', '์ํธํ', '์ทจ์ฝ์ ', 'SQL ์ธ์ ์ ', 'XSS', '๋ณด์ ๊ฒ์ฌ' ์์ฒญ ์ ์๋ ๋ฐ๋. .env/auth/**/guard/** ํ์ผ ์์ ์ ์๋ ์ ์ฉ. ํ๋์ฝ๋ฉ ์ํฌ๋ฆฟ ํ์ง(40+ ํจํด), OWASP Top 10 ๊ฒ์ฆ.
Guidelines for integrating Clerk authentication into the RFP Discovery application with Convex