authentication
Backend authentication and authorization patterns. JWT, OAuth2, session management, RBAC, and secure token handling.
Backend authentication and authorization patterns. JWT, OAuth2, session management, RBAC, and secure token handling.
Remote 요청 브릿지 스킬. Use when (1) 원격 상태 확인, (2) 대기 중인 요청 조회, (3) 수동 권한 승인/거부.
Implement security best practices including secrets management, policy as code, and compliance scanning
Implement Cross-Site Request Forgery (CSRF) protection for API routes. Use this skill when you need to protect POST/PUT/DELETE endpoints, implement token validation, prevent cross-site attacks, or secure form submissions. Triggers include "CSRF", "cross-site request forgery", "protect form", "token validation", "withCsrf", "CSRF token", "session fixation".
List all secrets. Requires authentication. Use for Agentuity cloud platform operations
Display information about the currently authenticated user. Requires authentication. Use for managing authentication credentials
Error handling patterns for ERPNext/Frappe permissions and access control. Use when handling PermissionError, has_permission failures, role issues, and document access problems. V14/V15/V16 compatible. Triggers: permission error, access denied, PermissionError, role error, has_permission failed, document access error.
Sé conservador en lo que envías, liberal en lo que aceptas. Use cuando diseñe validaciones de formularios, APIs, o maneje inputs de usuario.
SEO 호환성 검증 - 브라우저 API 사용 및 이중 구현 확인, SPA 감지 시 경고
Security audit patterns including OWASP Top 10, secret scanning, and language-specific vulnerabilities.
OWASP Top 10, authentication, and secure coding practices
Security testing patterns covering OWASP Top 10, injection prevention, authentication, and vulnerability scanning
Ensure agent safety - guardrails, content filtering, monitoring, and compliance
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティ、脆弱性、OWASP、認証、認可、監査を依頼された時。
Audit own behavior against protocol specifications.
Manages fnox encrypted secrets for the micelio project. Use when setting up secrets, adding new environment variables, configuring deployment credentials, or troubleshooting fnox/age encryption.
Implement comprehensive input validation on both client and server sides with clear error feedback. Use this skill when validating user input in forms, API endpoints, or data processing. Use this skill when implementing server-side validation to ensure data integrity and security. Use this skill when adding client-side validation for immediate user feedback. Use this skill when sanitizing input to prevent injection attacks. Use this skill when validating data types, formats, ranges, and business rules. Use this skill when providing specific, actionable error messages for validation failures. Use this skill when applying validation consistently across all application entry points.
Role-based access control (RBAC) patterns, authentication wrappers, authorization checks, input validation with Zod schemas, security boundaries, server action security, real-time message validation, preventing common vulnerabilities like XSS and SQL injection, and security best practices for ree-board project
Validation agent that validates plan tech choices against current best practices
Security analysis, vulnerability assessment, and security code reviews
Claude applies OWASP security best practices to web applications. Use when preventing vulnerabilities, implementing input validation, securing authentication, configuring security headers, or conducting security reviews.