security-auditor
Security Auditor Agent. ๋ณด์ ๊ฐ์ฌ, ์ทจ์ฝ์ ๋ถ์, ์ปดํ๋ผ์ด์ธ์ค ๊ฒํ ๋ฅผ ๋ด๋นํฉ๋๋ค. ๋ณด์, ๊ฐ์ฌ(audit), ์ทจ์ฝ์ , ์ปดํ๋ผ์ด์ธ์ค ๊ด๋ จ ์์ฒญ ์ ์ฌ์ฉ๋ฉ๋๋ค.
Security Auditor Agent. ๋ณด์ ๊ฐ์ฌ, ์ทจ์ฝ์ ๋ถ์, ์ปดํ๋ผ์ด์ธ์ค ๊ฒํ ๋ฅผ ๋ด๋นํฉ๋๋ค. ๋ณด์, ๊ฐ์ฌ(audit), ์ทจ์ฝ์ , ์ปดํ๋ผ์ด์ธ์ค ๊ด๋ จ ์์ฒญ ์ ์ฌ์ฉ๋ฉ๋๋ค.
Comprehensive guide to implementing Single Sign-On with SAML 2.0 and OpenID Connect for enterprise authentication
Detect hardcoded secrets, API keys, passwords, and credentials in source code. Security audit for leaked secrets. Works across all languages. Use when user asks about security issues or secret detection.
Classting ์๋น์ค์ access_token์ ํ๋ํฉ๋๋ค. ai.classting.net์ ์ ์ํ์ฌ OIDC ๋ก๊ทธ์ธ ํ JWT ํ ํฐ์ ๋ฐํํฉ๋๋ค. Classting API ํธ์ถ, e2e ํ ์คํธ, ์ธ์ฆ์ด ํ์ํ ์์ ์ ์ฌ์ฉํฉ๋๋ค.
Ktor HTTP Client - use for backend API calls, REST requests, serialization, authentication, and client-server communication
ๅบไบNFRๅฎๅ จ่ฆๆฑ๏ผ็ๆSTRIDE/OWASPๅจ่ๆจกๅๅๆต่ฏๅบๆฏใL3็บงๅซไธ็จ๏ผๅฝ่ฎพ่ฎกๅ้ๆฑ็กฎ่ฎคๅไฝฟ็จใ
Authentication system design and implementation guidance with Python examples using strict typing. Use when: (1) Designing authentication flows (signup, login, logout, refresh), (2) Selecting between session vs token-based auth, (3) Designing JWT structure and claims, (4) Implementing OAuth 2.0 flows, (5) Setting up multi-service authentication patterns, (6) Creating password reset and email verification flows, (7) Implementing role-based access control (RBAC), (8) Creating security checklists for auth systems, (9) Planning frontend/backend auth integration. All examples follow Python typing standards and security best practices.
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.
Implement Rails 8 built-in authentication with has_secure_password, session cookies, and the Authentication concern. Use when building login/logout functionality, session-based auth, or user authentication systems in Rails 8+ applications.
Minimum security controls every service must implement: authentication/authorization, input validation, secrets management, security headers, dependency security, audit logging, and operational guardrails
Comprehensive security testing framework aligned with OWASP Top 10 and CWE/SANS Top 25. Performs static analysis (SAST), dependency auditing (SCA), secret scanning, and infrastructure security checks. Generates actionable remediation reports with CVSS severity scoring.
Adds BetterAuth authentication to Apso backends. Handles entity setup, code generation, auto-fixes, and verification. Triggers when user needs to add authentication, setup auth, or integrate BetterAuth.
**SECURITY SHIELD**: '๋ณด์', '์ธ์ฆ', '๋ก๊ทธ์ธ', '๋น๋ฐ๋ฒํธ', 'JWT', 'ํ ํฐ', '์ํธํ', '์ทจ์ฝ์ ', 'SQL ์ธ์ ์ ', 'XSS', '๋ณด์ ๊ฒ์ฌ' ์์ฒญ ์ ์๋ ๋ฐ๋. .env/auth/**/guard/** ํ์ผ ์์ ์ ์๋ ์ ์ฉ. ํ๋์ฝ๋ฉ ์ํฌ๋ฆฟ ํ์ง(40+ ํจํด), OWASP Top 10 ๊ฒ์ฆ.
Guidelines for integrating Clerk authentication into the RFP Discovery application with Convex
Enterprise-grade security expertise with production-ready patterns for OWASP Top 10 2021, zero-trust architecture, threat modeling (STRIDE, PASTA), secure SDLC, DevSecOps automation, cloud security, cryptography, identity & access management, and compliance frameworks (SOC 2, ISO 27001, GDPR, CCPA).
OPA RBAC policies preventing cluster-admin privilege escalation, restricting privileged verbs, and blocking wildcard permissions.
Encryption patterns - AES-GCM, RSA, password hashing, envelope encryption
Normalize a single DPP passport input into lab_battery_passport_extended_v1 (happy-path).
Cloudflare ใปใญใฅใชใใฃๆฉ่ฝใฎๅฎๅ จใฌใคใใZero TrustใWAFใDDoS ProtectionใBot ManagementใSSL/TLSใTurnstile ใฎ่จญๅฎใจไฝฟใๆนใๆไพใUse when user asks about Zero Trust, WAF, DDoS, Bot Management, SSL, TLS, Turnstile, Access, Gateway, or security configuration. Also use when user says ใปใญใฅใชใใฃ, ใผใญใใฉในใ, WAF, DDoS, ใใใๅฏพ็ญ, SSL, Turnstile.