username-retrieval-service
Retrieve username data through secure verification protocols.
auth-patterns
Supabase authentication patterns including getUser vs getSession, deadlock avoidance, session handling, and bypass patterns. Use when working with auth, sessions, cookies, or encountering auth hangs/timeouts. Keywords: auth, getUser, getSession, session, deadlock, timeout, cookie, token, Web Locks.
stix2-validator
Validate STIX 2.1 JSON files and bundles against the STIX specification. Use when validating threat intelligence data, checking STIX bundle integrity before ingestion, verifying indicator/malware/attack-pattern objects have required fields, or bulk-validating directories of STIX files. Provides detailed error reports showing which objects failed and why.
security-lens
Apply security awareness during code review and implementation. Catches common vulnerabilities without requiring full security audit.
auth-provider
่ฎค่ฏๆไพๅ็ปไธๆฅๅฃ๏ผๆฏๆ Supabase AuthใClerkใFirebase Auth ็ญไธปๆต่ฎค่ฏๆๅกใ ๆไพ็จๆทๆณจๅใ็ปๅฝใOAuthใไผ่ฏ็ฎก็ใๆ้้ช่ฏ็ญๅ่ฝใ
security-scanner
Comprehensive security scanner for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues
security-review
Auditorรญa de seguridad OWASP Top 10. Usar para revisar cรณdigo en busca de vulnerabilidades, validar autenticaciรณn/autorizaciรณn, analizar input sanitization, detectar SQL injection, XSS, CSRF y otras vulnerabilidades comunes.
supabase-rls-policy-generator
This skill should be used when the user requests to generate, create, or add Row-Level Security (RLS) policies for Supabase databases in multi-tenant or role-based applications. It generates comprehensive RLS policies using auth.uid(), auth.jwt() claims, and role-based access patterns. Trigger terms include RLS, row level security, supabase security, generate policies, auth policies, multi-tenant security, role-based access, database security policies, supabase permissions, tenant isolation.
secrets-management
Manages API keys, credentials, and sensitive configuration using secrets.json patterns with environment variable fallbacks. Use when working with API keys, credentials, .env files, or any sensitive configuration.
tg-permissions
Permission and access control patterns for the World of Darkness Django application. Use when implementing view permissions, checking user access levels, creating limited forms for owners, using PermissionManager vs is_st(), or working with view mixins. Triggers on permission checks, ST-only features, owner restrictions, or access control logic.
spring-security
Secure Spring Boot applications - authentication, authorization, OAuth2, JWT, CORS/CSRF protection
profile-switch
ไฟๅญๆธใฟใฎ Google ่ช่จผใใญใใกใคใซใๅใๆฟใใใใใขใซใฆใณใๅๆฟใใใใญใใกใคใซๅคๆดใใๅฅใขใซใฆใณใใงไฝฟใใใใใGoogle ใขใซใฆใณใใๅคใใใใ่ช่จผใๅใๆฟใใใชใฉใง่ตทๅใ
security-auditor
Performs comprehensive security audits of KrakenD configurations to identify vulnerabilities, authentication gaps, and security best practices violations with Flexible Configuration support
better-auth-best-practices
Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.
security-review
Security audit checklist and best practices for bCommGuard WhatsApp bot
security-auditor
Review code for vulnerabilities, implement secure authentication, and ensure OWASP compliance. Handles JWT, OAuth2, CORS, CSP, and encryption. Use PROACTIVELY for security reviews, auth flows, or vulnerability fixes.
