Security best practices for production applications including PII protection, input validation, SQL injection prevention, XSS mitigation, and secure logging. Apply when handling user data, authentication, or external inputs.
Specialized auditor for SOC2, HIPAA, GDPR, and regulatory compliance frameworks across industries
Locked auth + authorization pattern for coverage-nextjs. Always reuse AuthContext + withAuth + existing helpers. Never create new auth routes or invent roles/permission logic.
Set up and manage user authentication using Convex Auth with login, signup, password reset, and user profile initialization. Use when implementing auth flows, managing user sessions, initializing user profiles, or handling authentication state.
ใปใญใฅใชใใฃใฌใใฅใผในใญใซใOWASP Top 10ใซๅบใฅใใปใญใฅใชใใฃ่ๅผฑๆงใฎใใงใใฏใSQLใคใณใธใงใฏใทใงใณใXSSใ่ช่จผใป่ชๅฏใๆๅทๅใชใฉใฎ่ฆณ็นใงใณใผใใใฌใใฅใผใใใปใญใฅใชใใฃใฌใใฅใผใใ่ๅผฑๆงใใงใใฏใใใปใญใฅใชใใฃ็ขบ่ชใใชใฉใฎใชใฏใจในใๆใซไฝฟ็จใ
Terraformใณใผใใฎใปใญใฅใชใใฃ่ๅผฑๆงใจใณใณใใฉใคใขใณในใฎๅ้กใๅๆใใพใใใฆใผใถใผใใปใญใฅใชใใฃใฎๅ้กใฎใใงใใฏใใคใณใใฉใณใผใใฎ็ฃๆปใใพใใฏใปใญใฅใชใใฃใณใณใใฉใคใขใณในใฎๆค่จผใๆฑใใๅ ดๅใซไฝฟ็จใใฆใใ ใใใ
Logout of the Agentuity Cloud Platform. Use for managing authentication credentials
This skill should be used when implementing Supabase email/password authentication in Next.js applications. Automates the complete setup including client/server utilities, login/register pages, auth callback handling, middleware protection, and email configuration. Handles common errors like PKCE flow issues, cookie management, and admin role verification.
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Review test cases for UserInfo Endpoint. Covers access token validation, Bearer token handling, sub claim consistency, scope-based claims, and signed responses per OIDC Core 1.0 Section 5.3.
Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API flaws. Use when pentesting web apps, analyzing authentication, or exploiting OWASP Top 10 vulnerabilities.
Validate IC10 code for correctness. Use when user wants to check IC10 code for errors, constraint violations, or best practice issues before using it in Stationeers.
React Server Components (RSC) ใฎๅฉ็จๆน้ใจใปใญใฅใชใใฃๅบๆบใซๅบใฅใใใใผใฟใฎๅฎๅ จๆงใจ็็ตๅๆงใ็ฃๆปใใพใใ
A specialized skill for managing cryptographic assets (keys, CSRs, certificates) with strict policy enforcement and auditability.
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Security audit, vulnerability scanning, and secrets detection for comprehensive application security
Implements authentication and authorization for Rust backend services using JWT, password hashing, sessions, and middleware patterns. Use when building auth systems, implementing login/logout, protecting routes, hashing passwords, or working with JWT tokens in Axum/Tower applications.
Coding and security standards. Apply when writing code, handling comments, error handling, API keys, database connections, user input, or file uploads.
Implement comprehensive input validation with server-side security, client-side UX feedback, sanitization, and consistent error messages. Use this skill when validating user input in forms, API endpoints, or data processing. When writing validation rules for data types, formats, ranges, or required fields. When sanitizing input to prevent injection attacks (SQL, XSS, command injection). When providing field-specific error messages to users. When implementing validation at system boundaries like API endpoints or background jobs.
Enforces CSP, input sanitization, encryption standards, and GDPR compliance for clinical data
Clerk ํ๋ ์ธ์ฆ ํ๋ซํผ ์ ๋ฌธ๊ฐ. WebAuthn, ํจ์คํค, ๋น๋ฐ๋ฒํธ ์๋ ์ธ์ฆ, UI ์ปดํฌ๋ํธ ์ ๊ณต. ํ๋์ ์ธ์ฆ UX ๊ตฌํ ์ ์ฌ์ฉ.
Modern HTTP client for Clojure wrapping JDK 11+ java.net.http. Use when working with HTTP requests, REST APIs, async HTTP calls, WebSockets, or needing HTTP/2 support.
Validation phase for /verify command - validates each component
ไปฃ็ ๅฎๅ จๅฎก่ฎกๆๅใๅฝ็จๆท้่ฆๆฃๆฅไปฃ็ ๅฎๅ จๆผๆดใๅฎๆฝๅฎๅ จๆไฝณๅฎ่ทตใ่ฟ่กๅฎๅ จไปฃ็ ๅฎกๆฅๆไฟฎๅคๅฎๅ จ้ฎ้ขๆถไฝฟ็จๆญคๆ่ฝใ
