security
0
ask-questions-v2
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
pascalandy
testing-security
sorting
stars
current ordering strategy
query
all entries
refine the visible subset
security
0
constitution
Load and confirm core principles, guardrails, and project context for MacroFlow sessions.
acornsoft
testing-security
security
0
authentication
Implement secure authentication with JWT, sessions, OAuth, and password hashing. Use when adding login/logout, token auth, or integrating OAuth providers.
ProfPowell
testing-security
security
0
auth-web-cloudbase
Complete guide for CloudBase Auth v2 using Web SDK (@cloudbase/js-sdk@2.x) - all login flows, user management, captcha handling, and best practices in one file.
binggg
testing-security
security
0
pkce-reviewer
Review test cases for PKCE (Proof Key for Code Exchange) implementation. Covers code_challenge/code_verifier validation, S256 transformation, and all PKCE requirements per OAuth 2.1 Sections 4.1.1, 4.1.3, 7.5.1, 7.5.2. PKCE is MANDATORY in OAuth 2.1.
maronnjapan
testing-security
security
0
do-platform-auth0
Auth0 보안 전문가로서 공격 방어, 다중 인증, 토큰 보안, 발신자 제약(DPoP/mTLS), 규정 준수(FAPI, GDPR, HIPAA)를 다룸. Auth0 보안 기능 구현, MFA 설정, 토큰 보안, 규정 요구사항 충족 시 사용.
yejune
testing-security
security
0
security
Security best practices covering OWASP Top 10, authentication, authorization, and common vulnerabilities. Trigger: When implementing authentication, when handling user input, when storing sensitive data, when building APIs, when conducting security reviews, when implementing authorization.
Dsantiagomj
testing-security
security
0
security-scanner
Automated security validation for OWASP Top 10, CVE detection, and secrets scanning with confidence-scored vulnerability reports.
christianearle01
testing-security
security
0
auditing-security
セキュリティ監査と脆弱性対策を支援します。OWASP Top 10に基づく包括的な脆弱性チェック、コード分析、リスク評価を提供します。セキュリティ脆弱性の特定、コンプライアンス確認、セキュアコーディング実装が必要な場合に使用してください。
sekka
testing-security
security
0
security-audit
Audit code for security vulnerabilities using OWASP Top 10, STRIDE threat modeling, and secure coding practices. Identifies SQL injection, XSS, CSRF, auth issues, and secrets exposure. Returns prioritized findings with remediation.
ils15
testing-security
security
0
moai-security-api
API security patterns - authentication, authorization, rate limiting, OWASP
jg-chalk-io
testing-security
security
0
vkc-visa-assessment-engine
Design and implement the Viet K-Connect visa assessment engine (DB-driven ruleset JSON schema + versioning + effective dates). No hardcoded rules in code. Use for building /api/visa/assess and admin ruleset management.
LEE-SANG-BOK
testing-security
security
0
curriculum-validate-cc
Validate IMS Common Cartridge 1.3 packages against spec, check manifest schema, verify file references, validate QTI assessments, and ensure LMS compatibility. Use when validating CC packages before delivery. Activates on "validate Common Cartridge", "check CC package", "verify IMS CC", or "CC validation".
pauljbernard
testing-security
security
0
fix-review
Verify that security fixes actually resolve the vulnerability without introducing new issues. Reviews fix commits against original findings. Inspired by Trail of Bits methodology.
mralbertzwolle
testing-security
security
0
security-engineer
Expert in infrastructure security, DevSecOps pipelines, and zero-trust architecture design.
404kidwiz
testing-security
security
0
auditproxy-audit-session
Issues a proxy audit verdict for a session.
venikman
testing-security
security
0
report-schema
Define audit report structure and JSON schema for hallucination auditor outputs
jamescockburn47
testing-security
security
0
email-address-lookup
Email validation, breach check, and associated account discovery
babdulhakim2
testing-security
security
0
security-architect
Expert security architecture including threat modeling, authentication, encryption, and compliance
ljchg12-hue
testing-security
security
0
selective-encrypted-storage
Security pattern for field-level encryption at rest. Use when encrypting specific sensitive data fields before storage, implementing application-level encryption for databases, or when only certain data elements need encryption at rest. Addresses "Leak data at rest" problem.
igbuend
testing-security
security
0
flutter-secure-storage-pattern
Pattern sicuro per salvare dati sensibili (Token, Seed) su device.
xnemesy
testing-security