Security best practices for production applications including PII protection, input validation, SQL injection prevention, XSS mitigation, and secure logging. Apply when handling user data, authentication, or external inputs.
Specialized auditor for SOC2, HIPAA, GDPR, and regulatory compliance frameworks across industries
Locked auth + authorization pattern for coverage-nextjs. Always reuse AuthContext + withAuth + existing helpers. Never create new auth routes or invent roles/permission logic.
Set up and manage user authentication using Convex Auth with login, signup, password reset, and user profile initialization. Use when implementing auth flows, managing user sessions, initializing user profiles, or handling authentication state.
セキュリティレビュースキル。OWASP Top 10に基づくセキュリティ脆弱性のチェック。SQLインジェクション、XSS、認証・認可、暗号化などの観点でコードをレビュー。「セキュリティレビュー」「脆弱性チェック」「セキュリティ確認」などのリクエスト時に使用。
Terraformコードのセキュリティ脆弱性とコンプライアンスの問題を分析します。ユーザーがセキュリティの問題のチェック、インフラコードの監査、またはセキュリティコンプライアンスの検証を求めた場合に使用してください。
Logout of the Agentuity Cloud Platform. Use for managing authentication credentials
This skill should be used when implementing Supabase email/password authentication in Next.js applications. Automates the complete setup including client/server utilities, login/register pages, auth callback handling, middleware protection, and email configuration. Handles common errors like PKCE flow issues, cookie management, and admin role verification.
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Review test cases for UserInfo Endpoint. Covers access token validation, Bearer token handling, sub claim consistency, scope-based claims, and signed responses per OIDC Core 1.0 Section 5.3.
Test web applications for security vulnerabilities including SQLi, XSS, command injection, JWT attacks, SSRF, file uploads, XXE, and API flaws. Use when pentesting web apps, analyzing authentication, or exploiting OWASP Top 10 vulnerabilities.
Validate IC10 code for correctness. Use when user wants to check IC10 code for errors, constraint violations, or best practice issues before using it in Stationeers.
React Server Components (RSC) の利用方針とセキュリティ基準に基づき、データの安全性と疎結合性を監査します。
A specialized skill for managing cryptographic assets (keys, CSRs, certificates) with strict policy enforcement and auditability.
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
Security audit, vulnerability scanning, and secrets detection for comprehensive application security
Implements authentication and authorization for Rust backend services using JWT, password hashing, sessions, and middleware patterns. Use when building auth systems, implementing login/logout, protecting routes, hashing passwords, or working with JWT tokens in Axum/Tower applications.
Coding and security standards. Apply when writing code, handling comments, error handling, API keys, database connections, user input, or file uploads.
Implement comprehensive input validation with server-side security, client-side UX feedback, sanitization, and consistent error messages. Use this skill when validating user input in forms, API endpoints, or data processing. When writing validation rules for data types, formats, ranges, or required fields. When sanitizing input to prevent injection attacks (SQL, XSS, command injection). When providing field-specific error messages to users. When implementing validation at system boundaries like API endpoints or background jobs.
Enforces CSP, input sanitization, encryption standards, and GDPR compliance for clinical data
Clerk 현대 인증 플랫폼 전문가. WebAuthn, 패스키, 비밀번호 없는 인증, UI 컴포넌트 제공. 현대적 인증 UX 구현 시 사용.
Modern HTTP client for Clojure wrapping JDK 11+ java.net.http. Use when working with HTTP requests, REST APIs, async HTTP calls, WebSockets, or needing HTTP/2 support.
Validation phase for /verify command - validates each component
代码安全审计指南。当用户需要检查代码安全漏洞、实施安全最佳实践、进行安全代码审查或修复安全问题时使用此技能。
