security-review
Security review with blocking authority for critical vulnerabilities
Security review with blocking authority for critical vulnerabilities
OWASP API Security Top 10 (2023) と {開発言語をここに書く} セキュリティベストプラクティス。脆弱性検出。Use when: セキュリティレビュー、脆弱性チェック、バージョン管理確認を依頼された時。
Audit code for security vulnerabilities using OWASP Top 10 guidelines. Use for security audits, pre-deployment checks, authentication reviews, or when checking for XSS, SQL injection, CSRF, or authorization issues. EXCLUSIVE to security-expert agent.
Implement secure JWT (JSON Web Token) authentication in Node.js applications with access/refresh tokens and role-based access control
Get a value from the keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
Generate TOTP codes for 2FA authentication. Essential for my survival!
Detects various injection vulnerabilities including SQL injection, LDAP injection, XPath injection, and code injection. Use when analyzing database queries, dynamic code generation, or investigating injection attacks.
Verify security considerations were addressed before shipping. Issues result in WARNINGS that strongly recommend fixing.
Shopify OAuth integration patterns for VioletConnect merchant onboarding
Guide for authenticating with Databricks Apps using cookie-based auth when OAuth/PAT tokens don't work. Use when connecting to Databricks Apps with User Authorization enabled.
专业安全审计专家,精通漏洞扫描、渗透测试、合规检查和安全代码审查。帮助企业识别和修复安全风险,确保系统和数据的安全性。
Verify integrity of context and behavioral calibration across session boundaries.
iOS/tvOS security best practices including Keychain usage, certificate pinning, secure data storage, and API key protection
Use when updating environment secrets like GITHUB_TOKEN, NPM_TOKEN, or API keys on the user's machine
Implement granular user permissions in Umbraco backoffice using official docs
Logout of the Agentuity Cloud Platform. Use for managing authentication credentials
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
Integrate Heartwood (GroveAuth) authentication into Grove applications. Use when adding sign-in, protecting routes, or validating sessions in any Grove property.
Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing
Generate cryptographic proof packets for verification.
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
Configure security headers to defend against clickjacking, XSS, MIME confusion, and SSL stripping attacks. Use this skill when you need to set up Content-Security-Policy, X-Frame-Options, HSTS, configure middleware headers, or understand browser security features. Triggers include "security headers", "CSP", "content security policy", "X-Frame-Options", "HSTS", "clickjacking", "MIME confusion", "middleware headers".