security
913
moai-platform-auth
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.
modu-ai
testing-security
sorting
stars
current ordering strategy
query
all entries
refine the visible subset
security
913
moai-platform-auth
Authentication and authorization specialist covering Auth0, Clerk, and Firebase Auth. Use when implementing authentication, MFA, SSO, passkeys, WebAuthn, social login, or security features.
modu-ai
testing-security
security
913
moai-ref-owasp-checklist
OWASP Top 10 security checklist, authentication patterns, input validation, and HTTP security headers reference. Agent-extending skill that amplifies expert-security and expert-backend expertise with production-grade security patterns. NOT for: frontend UI, DevOps deployment, performance optimization, testing strategy.
modu-ai
testing-security
security
894
clawsec-nanoclaw
Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
prompt-security
testing-security
security
894
clawsec-suite
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
prompt-security
testing-security
security
894
openclaw-audit-watchdog
Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.
prompt-security
testing-security
security
865
k8s-security
Audit Kubernetes RBAC, enforce policies, and manage secrets. Use for security reviews, permission audits, policy enforcement with Kyverno/Gatekeeper, and secret management.
rohitg00
testing-security
security
847
f8-features-obfuz-workflow
Use when implementing or troubleshooting Obfuz feature workflows — code obfuscation and protection in F8Framework.
TippingGame
testing-security
security
832
bk-monitor-security-audit
对前端代码进行安全审计，检测 XSS、CSRF 等漏洞。当用户请求代码审查或询问代码安全性时使用。
TencentBlueKing
testing-security
security
826
human-auth-biometric
Handle biometric authentication delegation (fingerprint, face recognition) when the Agent Phone lacks biometric hardware.
pockebot
testing-security
security
826
human-auth-oauth
Handle account login credential delegation from Human Phone. Covers username/password entry, social sign-in walls, and multi-step login flows.
pockebot
testing-security
security
826
human-auth-sms-2fa
Handle SMS verification codes and 2FA TOTP codes from Human Phone. Covers OTP entry, code verification, and multi-factor authentication flows.
pockebot
testing-security
security
821
feishu-cli-auth
飞书 OAuth 认证和 User Access Token 管理（Device Flow，RFC 8628）。 支持一键创建飞书应用（config create-app）、auth check 预检 scope、 auth login 登录、Token 自动刷新。无需配置任何重定向 URL 白名单。 当用户请求"登录飞书"、"获取 Token"、"OAuth 授权"、"auth login"、"认证"、 "搜索需要什么权限"、"Token 过期了"、"刷新 Token"、"创建应用"、"create-app"、 "缺少权限"、"99991672"、"99991679"时使用。 当其他飞书技能（toolkit/msg/read 等）遇到 User Access Token 相关问题时，也应参考此技能。
riba2534
testing-security
security
808
cuopt-installation-api-c
Install cuOpt for C — conda, locate lib/headers, verification. Use when the user is installing or verifying the C API. Standalone; no common skill.
NVIDIA
testing-security
security
808
cuopt-installation-api-python
Install cuOpt for Python — pip, conda, Docker, verification. Use when the user is installing or verifying the Python API. Standalone; no common skill.
NVIDIA
testing-security
security
807
axiom-privacy-ux
Use when implementing privacy manifests, requesting permissions, App Tracking Transparency UX, or preparing Privacy Nutrition Labels - covers just-in-time permission requests, tracking domain management, and Required Reason APIs from WWDC 2023
CharlesWiltgen
testing-security
security
807
axiom-app-attest
Use when implementing app integrity verification, preventing fraud with DCAppAttestService, validating requests from legitimate app instances, using DeviceCheck for promotional abuse prevention, or needing server-side attestation/assertion validation. Covers key generation, attestation, assertion, rollout strategy, and risk metrics.
CharlesWiltgen
testing-security
security
807
axiom-app-store-submission
Use when preparing ANY app for App Store submission, responding to App Review rejections, or running a pre-submission audit. Covers privacy manifests, metadata requirements, IAP review, account deletion, SIWA, age ratings, export compliance, first-time developer setup.
CharlesWiltgen
testing-security
security
807
axiom-assume-isolated
Use when needing synchronous actor access in tests, legacy delegate callbacks, or performance-critical code. Covers MainActor.assumeIsolated, @preconcurrency protocol conformances, crash behavior, Task vs assumeIsolated.
CharlesWiltgen
testing-security