slack-status
Validates Slack configuration and credentials. Checks if config exists, credentials are present, and authentication is working. Used internally by other Slack skills.
Validates Slack configuration and credentials. Checks if config exists, credentials are present, and authentication is working. Used internally by other Slack skills.
DEPRECATED umbrella Skill (backward compatibility). Use only for cross-cutting security reviews spanning remote content + XSS/sanitization + store compliance. Prefer focused openwebf-security-* Skills.
Display the API key for the currently authenticated user. Requires authentication. Use for managing authentication credentials
Review and mitigate XSS risks in WebF apps (sanitize HTML, validate input, avoid unsafe string rendering). Use when the user mentions XSS, sanitize HTML, innerHTML-like rendering, user-generated HTML, or โuntrusted inputโ.
Write and validate Firestore Security Rules following the project's multi-tenancy Blueprint pattern. Use this skill when implementing collection-level security, Blueprint membership validation, role-based permissions, and data access controls. Ensures rules validate BlueprintMember status, check permissions array, enforce data isolation, and integrate with the three-layer architecture where Security Rules are the first line of defense.
ใปใญใฅใชใใฃๅฐ้ๅฎถใ่ๅผฑๆง่จบๆญใ่ ๅจใขใใชใณใฐใใปใญใฅใชใใฃใในใใใฉใฏใใฃใน้ฉ็จใๆฏๆดใไฝฟ็จๅ ด้ข: (1) ใปใญใฅใชใใฃ่ๅผฑๆง่จบๆญใ(2) ่ ๅจใขใใชใณใฐใ(3) ่ช่จผใป่ชๅฏใฎ่จญ่จใฌใใฅใผใ(4) ใใผใฟไฟ่ญทใฎๆค่จผใ(5) ใปใญใฅใชใใฃ็ฃๆปใใใชใฌใผ: "security-analyst", "ใปใญใฅใชใใฃ", "่ๅผฑๆง", "่ ๅจ", "/security-analyst"
Run security scan on skills or directories to detect API keys, tokens, passwords, personal paths, and other sensitive data. Use before pushing skills or committing code.
ืกืืืข ืืืืืืช ืืคืืืงืฆืืืช ืืื ื-APIs. ืืฉืชืืฉ ืืฉืืืงืฉืื ืืืืื ืคืจืืืงื, ืืืืืง ืืืืฉืืช, ืืืืืืจ ืืจืฉืืืช, ืื ืื API keys, ืื ืืืื ืขื ื ืชืื ืื. ืืืชืื ื-Vibe Coders ืฉืขืืืืื ืขื Supabase, FastAPI, ื-Claude Code. ืืกืืืจ ืืืฉืื ืืืืื ืืฉืคื ืคืฉืืื ืขื ืฆ'ืงืืืกืืื ืืขืฉืืื.
Get a value from the keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
Implement an RFC-compliant OAuth 2.1 authorization server in Rails applications. Use when building apps that need to authorize third-party clients (like MCP clients, API consumers, or external integrations) using industry-standard OAuth flows with PKCE, dynamic client registration, and token management.
ะญะบัะฟะตัั ะฟะพ ัะฐะฝะธัะธะทะฐัะธะธ ะฒะฒะพะดะฐ. ะัะฟะพะปัะทัะน ะดะปั XSS prevention, encoding, validation ะธ security headers.
Validate AgentConfig definitions for the Agent Framework. Use when creating or modifying agent configurations to ensure correct structure, valid tool references, and proper sub-agent composition. Validates TypeScript interfaces and Python Pydantic models.
security-auditor skill Trigger terms: security audit, vulnerability scan, OWASP, security analysis, penetration testing, security review, threat modeling, security best practices, CVE Use when: User requests involve security auditor tasks.
Auth system (Clerk + Convex + anonymous JWT) guidelines and planned permissions/upgrade behavior.
Implement authentication using better-auth library in web applications. Use this skill when users need to add signup, signin, signout, session management, or user profile features. Triggers on requests for authentication, login systems, user registration, OAuth integration, or protecting routes with auth.
Implement comprehensive validation on server and client sides with fail-fast checks, specific error messages, input sanitization, and consistent validation across all entry points. Use this skill when validating user input or form data, implementing server-side validation logic, adding client-side validation for user experience, creating validation schemas or rules, implementing type and format checks, sanitizing input to prevent injection attacks, validating business rules, creating field-specific error messages, implementing allowlist validation patterns, or ensuring consistent validation across web forms, API endpoints, and background jobs. Use when working with validation libraries, form handlers, API request validators, or any code that processes user input.
Scan for OWASP Top 10 vulnerabilities and security best practices. Checks for SQL injection, XSS, authentication issues, sensitive data exposure, and other common security risks.
Expert in ethical hacking, vulnerability assessment, and offensive security testing (Web/Network/Cloud).
Vercel CLIใฎใคใณในใใผใซใป่ช่จผใป่จญๅฎใ่กใใใVercel่จญๅฎใใvercel่จญๅฎใใVercelใปใใใขใใใใไพ้ ผใใใใจใใซไฝฟ็จใใใ
Check vendor portal credentials and cookie expiration status. Use when checking vendor status, credentials, or cookie expiration.
Create and manage authentication pages with server-side session handling. Use when adding login, register, or protected pages WITHOUT flicker/skeleton.