file-upload-handling
Implement secure file uploads with validation, size limits, type checking, virus scanning, and UUID naming. Use when handling file uploads like profile photos, documents, or resources.
Implement secure file uploads with validation, size limits, type checking, virus scanning, and UUID naming. Use when handling file uploads like profile photos, documents, or resources.
Checklists mรญnimos obligatorios de SEO y seguridad antes de confirmar cambios en archivos sensibles.
Implement authentication with Sanctum, Passport, Socialite, Fortify, policies, and gates. Use when setting up user authentication, API tokens, social login, or authorization.
OWASP Top 10, SAST/DAST, dependency security, and secrets management.
Security pattern for implementing authentication in software systems. Use when designing or reviewing authentication mechanisms, implementing login systems, verifying user identity, protecting system access, or addressing OWASP authentication flaws. Provides guidance on enforcers, verifiers, evidence providers, subject registration, credential management, and security considerations.
Security vulnerability scanning and audit. Use when user needs security check, dependency updates, vulnerability scan, or says "check security", "audit code", "security vulnerabilities", "update gems", "CVE check".
Logout of the Agentuity Cloud Platform. Use for managing authentication credentials
Complete guide for CloudBase Auth v2 using Web SDK (@cloudbase/js-sdk@2.x) - all login flows, user management, captcha handling, and best practices in one file.
Security pattern for channel-level encryption (TLS/SSH). Use when implementing HTTPS, securing all communication between endpoints, setting up TLS connections, or when infrastructure should handle encryption transparently. Addresses "Leak action request or data in transit" problem.
Expert knowledge of web application security including OWASP Top 10 vulnerabilities, input validation, authentication, authorization, API security, secrets management, security headers, and secure coding practices. Use when implementing security features, reviewing code for vulnerabilities, adding authentication, validating user input, or addressing security concerns.
Verify claims in generated output against sources. Use as a separate pass AFTER content generation to catch hallucinations. Critical constraint - cannot be reliably combined with generation in a single pass.
IOE-DREAMๅพฎๆๅก่ฎค่ฏๆถๆ่ง่ใๆถต็Gateway้ไธญ่ฎค่ฏ(JWT้ช่ฏใToken้ปๅๅ)ใไธๅกๅฑๆๆ(@PermissionCheckๆณจ่งฃ)ใSpring Securityไพ่ต็ฎก็(ไธๅกๆๅกๆ้ค)ใGateway่บซไปฝๅคด่ฝฌๅ(X-User-Id็ญHTTPๅคด)ใRBAC่งๅๅผๆใไฝฟ็จๆถๆบ:ๅฎ็ฐๆ้้ช่ฏใ้ ็ฝฎGatewayใ่ฐ่ฏ่ฎค่ฏ้ฎ้ขๆถใ
Audits RLS policies, validates security implementations, and identifies vulnerabilities
Handle WordPress login/logout redirects. Use when implementing custom redirect logic.
Comprehensive security verification - audit dependencies, check for vulnerabilities, verify constant-time ops
Review security risks and mitigations for remote WebF content (untrusted bundles, URL allowlists, HTTPS, trust boundaries, clickjacking). Use when the user mentions untrusted remote bundles, bundle URL validation/allowlists, or remote updates risk.
.NET library for local user authentication with email verification, MFA, password resets, and account management. Use when implementing username/password authentication instead of external OAuth providers.
Hunt for hardcoded secrets, API keys, tokens, credentials, private keys, and sensitive configuration. Use when auditing code for credential exposure or before committing code.
Enforce public-sources-only verification for legal authority checking and hallucination classification.
Comprehensive security validation for password generator applications. Use when auditing, implementing, or reviewing security measures for password handling and generation.
Use when building MCP servers in TypeScript, Python, or C#; when implementing tools, resources, or prompts; when configuring Streamable HTTP transport; when migrating from SSE; when adding OAuth authentication; when seeing MCP protocol errors
Application security, vulnerability assessment ve secure coding practices iรงin kullanฤฑlฤฑr. Authentication, authorization, OWASP Top 10 ve security audit konularฤฑnda uzman.
ะญะบัะฟะตัั ISO 27001. ะัะฟะพะปัะทัะน ะดะปั ISMS, security controls ะธ compliance implementation.