home/categories/testing-security
domain cluster

Testing & Security

QA, penetration testing, and code quality.

9326 اسکلزall categories
sorting
stars
current ordering strategy
query
all entries
refine the visible subset
security
0

global-validation

Implement comprehensive validation on server and client sides with fail-fast checks, specific error messages, input sanitization, and consistent validation across all entry points. Use this skill when validating user input or form data, implementing server-side validation logic, adding client-side validation for user experience, creating validation schemas or rules, implementing type and format checks, sanitizing input to prevent injection attacks, validating business rules, creating field-specific error messages, implementing allowlist validation patterns, or ensuring consistent validation across web forms, API endpoints, and background jobs. Use when working with validation libraries, form handlers, API request validators, or any code that processes user input.

tlabs-xyz
tlabs-xyz
testing-security
open
security
0

security-auditor

Scan for OWASP Top 10 vulnerabilities and security best practices. Checks for SQL injection, XSS, authentication issues, sensitive data exposure, and other common security risks.

gregsuptown
gregsuptown
testing-security
open
security
0

penetration-tester

Expert in ethical hacking, vulnerability assessment, and offensive security testing (Web/Network/Cloud).

404kidwiz
404kidwiz
testing-security
open
security
0

setup-vercel

Vercel CLIのインストール・認証・設定を行う。「Vercel設定」「vercel設定」「Vercelセットアップ」を依頼されたときに使用する。

matsuni-kk
matsuni-kk
testing-security
open
security
0

vendor-status

Check vendor portal credentials and cookie expiration status. Use when checking vendor status, credentials, or cookie expiration.

yuush10
yuush10
testing-security
open
security
0

auth-pages

Create and manage authentication pages with server-side session handling. Use when adding login, register, or protected pages WITHOUT flicker/skeleton.

atilladeniz
atilladeniz
testing-security
open
security
0

1password

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

chriskjaer
chriskjaer
testing-security
open
security
0

fortify-security

Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.

gravito-framework
gravito-framework
testing-security
open
security
0

tooling

Tooling and verification. Apply when encountering unfamiliar third-party libraries, framework updates, uncertain parameter types, verifying best practices, or uncertain API parameters.

ChanningHe
ChanningHe
testing-security
open
security
0

task-coding-loop

Earn trust through verification. Invoke at session start to establish verifiable checkpoints (environment, baseline, completion). Trust comes from gates, not claims.

Anveio
Anveio
testing-security
open
security
0

fix-google-auth

Diagnose and resolve Google OAuth 'server_error' caused by credential mismatches.

canyouseeus
canyouseeus
testing-security
open
security
0

security-audit

Identify and fix security vulnerabilities in code and infrastructure

agentpoet
agentpoet
testing-security
open
security
0

limit-request-rate

Security pattern for implementing rate limiting and throttling. Use when protecting against brute-force attacks, DoS/DDoS mitigation, preventing resource exhaustion, or limiting API abuse. Addresses "Entity absorbs excessive resources" problem.

igbuend
igbuend
testing-security
open
security
0

agentuity-cli-auth-whoami

Display information about the currently authenticated user. Requires authentication. Use for managing authentication credentials

agentuity
agentuity
testing-security
open
security
0

arlo

Manage Arlo security cameras, video doorbell, and smart home security

Andrejones92
Andrejones92
testing-security
open
security
0

security

Expert security architect providing comprehensive security guidance, architecture assessments, threat modeling, and compliance verification. Follows OWASP, NIS2, ISO 27001, NIST, and industry best practices. Use for security architecture design and review, threat modeling, security strategy, compliance assessment (OWASP, NIS2, GDPR, PCI DSS, SOC 2), infrastructure security, API security patterns, and incident response planning. For code-level security reviews, use the code-review skill.

tomas-u
tomas-u
testing-security
open
security
0

security-owasp

Comprehensive secure coding instructions for all languages and frameworks, based on OWASP Top 10 and industry best practices.

ofiz
ofiz
testing-security
open
security
0

csp-header-generator

Generate Content Security Policy (CSP) header configurations for web security. Triggers on "create csp header", "generate content security policy", "csp config", "security headers".

ehtbanton
ehtbanton
testing-security
open
securitymarketplace
0

permission-doctor

Diagnose permission issues across settings files (read-only analysis)

cuioss
cuioss
testing-security
open
security
0

sa-token

Sa-Token 权限认证框架开发规范。当进行登录认证、权限校验、角色管理、JWT Token 处理时自动使用。

m19803261706
m19803261706
testing-security
open
security
0

oss-release-checklist

Comprehensive checklist for releasing OSS projects. Covers security (CSP, PII, secrets), legal compliance (licenses, API terms, trademarks), privacy (GDPR, telemetry opt-out), and documentation. Use when preparing to open source a project, adding telemetry/error monitoring, auditing dependencies, or creating privacy policies.

ebiyy
ebiyy
testing-security
open
security
0

output-filter

Security pattern for filtering data before sending to external entities. Use when preventing excessive data exposure, implementing data minimization, protecting sensitive information in API responses, or ensuring clients receive only necessary data. Addresses "Entity receives excessive data" problem and OWASP API3:2019 Excessive Data Exposure.

igbuend
igbuend
testing-security
open
Previous
Page 330 / 389
Next