security
0
security-scanning
Security scanning tools (gosec, govulncheck). Use when running security analysis.
IvanTorresEdge
testing-security
sorting
stars
current ordering strategy
query
all entries
refine the visible subset
security
0
log-entity-actions
Security pattern for implementing security logging and audit trails. Use when designing logging systems for security events, implementing non-repudiation, creating audit trails, or addressing security monitoring and incident response needs. Addresses "Entity repudiates action request" problem.
igbuend
testing-security
security
0
injection-hunter
Hunt for injection vulnerabilities including SQL injection, command injection, XSS, SSTI, path traversal, LDAP injection, and other input validation flaws. Use when auditing code that processes user input.
MAF2414
testing-security
security
0
random-hash
Generate salted hash URLs with QR codes displayed in terminal. Use when user wants to create a unique URL with a random salt appended to an identifier, or needs a QR code linking to a user profile page. Triggers on /random-hash commands.
erikdrouhard
testing-security
security
0
dos-resource-exhaustion
Find denial of service vulnerabilities through resource exhaustion, algorithmic complexity, memory exhaustion, and file/network resource abuse. Use when auditing code for availability issues.
MAF2414
testing-security
securitymarketplace
0
quantum-signing
Use when implementing quantum-resistant cryptographic signing. Triggers: "quantum signing", "ML-DSA", "post-quantum", "operation signing", "quantum-resistant". NOT for: Standard encryption or non-cryptographic integrity checks.
pagerguild
testing-security
security
0
iam-migration-validation
Automated post-migration validation for iam-migration (ETBC to IAM). Use when designing or executing verification that legacy ETBC users can log in to the portal, permissions are consistent, and app/menu mappings are correct across iam-management-service, iam-auth-center-service, APISIX, and portal-front.
LLLLimbo
testing-security
security
0
macos-security
macOSアプリのセキュリティレビュー。Notarization、Hardened Runtime、Sandbox、コード署名をチェック。Use when: macOS、公証、Notarization、Sandbox、署名 を依頼された時。
miyakawa2449
testing-security
security
0
security-auth
Authentication and security patterns for EFT-Tracker using NextAuth. Covers password reset, session management, CSRF protection, and security reviews. Activates when user mentions: auth, authentication, password, NextAuth, session, security, login, logout, CSRF, rate limit, token, JWT.
tuckerandrew21
testing-security
security
0
rpt-permissions
Configure RPT token exchange and permission-based authorization for affolterNET.Web.Bff. Use when setting up Keycloak permissions, resource policies, or fine-grained access control.
Mcafee123
testing-security
security
0
authentication
Authentication patterns for JWT, sessions, OAuth, MFA, and secure auth flows. Trigger: When implementing authentication, when setting up JWT tokens, when building login flows, when integrating OAuth providers, when implementing password reset, when adding MFA.
Dsantiagomj
testing-security
security
0
wa-security-review
Conduct a focused security audit based on the Well-Architected Framework Security pillar. Use when user says "security review", "wa security", or "security audit". Analyzes authentication, authorization, data protection, input validation, and secrets management.
brendankowitz
testing-security
security
0
security-stance-analyzer
Analyzes the security posture of systems, codebases, and infrastructure. Examines authentication, authorization, data protection, network security, dependency vulnerabilities, secrets management, and compliance. Use when assessing security risks, performing security audits, or evaluating defensive measures.
gurdiga
testing-security
security
0
keycloak-administration
Provides comprehensive KeyCloak administration guidance including realm management, user/group administration, client configuration, authentication flows, identity brokering, authorization policies, security hardening, and troubleshooting. Covers SSO configuration, SAML/OIDC setup, role-based access control (RBAC), user federation (LDAP/AD), social login integration, multi-factor authentication (MFA), and high availability deployments. Use when configuring KeyCloak, setting up SSO, managing realms and clients, troubleshooting authentication issues, implementing RBAC, or when users mention "KeyCloak", "SSO", "OIDC", "SAML", "identity provider", "IAM", "authentication flow", "user federation", "realm configuration", or "access management".
DauQuangThanh
testing-security
security
0
draconian-rls-audit
Default-Deny security posture for Supabase. Mandates strict RLS and 'WITH CHECK' clauses.
cityfish91159
testing-security
security
0
secure-development
Security best practices for production applications including PII protection, input validation, SQL injection prevention, XSS mitigation, and secure logging. Apply when handling user data, authentication, or external inputs.
vineethsoma
testing-security
security
0
compliance-auditor
Specialized auditor for SOC2, HIPAA, GDPR, and regulatory compliance frameworks across industries
404kidwiz
testing-security
security
0
auth-locked
Locked auth + authorization pattern for coverage-nextjs. Always reuse AuthContext + withAuth + existing helpers. Never create new auth routes or invent roles/permission logic.
WorkSync-Developement
testing-security
security
0
convex-authentication
Set up and manage user authentication using Convex Auth with login, signup, password reset, and user profile initialization. Use when implementing auth flows, managing user sessions, initializing user profiles, or handling authentication state.
violabg
testing-security
security
0
security-review-skill
セキュリティレビュースキル。OWASP Top 10に基づくセキュリティ脆弱性のチェック。SQLインジェクション、XSS、認証・認可、暗号化などの観点でコードをレビュー。「セキュリティレビュー」「脆弱性チェック」「セキュリティ確認」などのリクエスト時に使用。
DIO0550
testing-security
security
0
check-security
Terraformコードのセキュリティ脆弱性とコンプライアンスの問題を分析します。ユーザーがセキュリティの問題のチェック、インフラコードの監査、またはセキュリティコンプライアンスの検証を求めた場合に使用してください。
t-taketake
testing-security