pix-validation-expert
Validates PIX key requirements for MutuaPIX platform, ensuring email used for login matches PIX key email for payment processing
Validates PIX key requirements for MutuaPIX platform, ensuring email used for login matches PIX key email for payment processing
Audit code for security vulnerabilities using OWASP Top 10 guidelines. Use for security audits, pre-deployment checks, authentication reviews, or when checking for XSS, SQL injection, CSRF, or authorization issues. EXCLUSIVE to security-expert agent.
Test FastAPI endpoints with Clerk JWT authentication while avoiding common environment, token expiry, and claim validation pitfalls. Use when tester-agent needs to validate API authentication, run end-to-end tests with real tokens, or troubleshoot JWT verification issues.
Advanced Security, IAM, OAuth2, and OWASP Standards
Troubleshoot Datadog API authentication issues (401/403 errors), understand API keys vs app keys, and configure correct regions. Use when hitting auth errors or setting up Datadog API access.
Audit tRPC procedures for security, validation, and architectural consistency. Ensures procedures follow the service-layer pattern and have proper Zod input validation. Use when reviewing server-side routers and procedures.
Enterprise-grade zero-knowledge client-side encryption implementation with Web Crypto API, PBKDF2 key derivation, AES-256-GCM encryption, and RSA-OAEP authentication for SvelteKit applications requiring maximum privacy and security.
Genera sistema completo de autenticación para Django con registro, login, verificación de email, recuperación de contraseña, social auth y protección de vistas. Usa django-allauth y best practices de seguridad.
Create shared HTTP clients in src/clients/ for Output SDK workflows. Use when integrating external APIs, creating service wrappers, or standardizing HTTP operations.
JWT (JSON Web Token) authentication skill for Python web applications. Use when: (1) Implementing token-based authentication, (2) Creating login/register endpoints, (3) Setting up access and refresh tokens, (4) Adding password hashing with Argon2/bcrypt, (5) Creating protected route dependencies, (6) Implementing role-based access control (RBAC), (7) Adding OAuth2 scopes, (8) Token blacklisting/revocation strategies.
Framework-agnostic frontend security guide based on OWASP. Use when implementing security in web applications, reviewing frontend code for vulnerabilities, or working with client-side authentication, XSS prevention, CSRF protection, or secure storage. Covers browser security features, client-side validation, and security headers.
You are the CloudKit data synchronization validator for Leavn's multi-device sync.
Security patterns and OWASP checklist. Auto-loads when handling auth, user input, API security, or reviewing code for vulnerabilities.
보안 리뷰 수행. 취약점 점검, OWASP Top 10, 시크릿 노출, 의존성 보안 검토
Generate JWT authentication configuration and utilities for API security. Triggers on "create jwt config", "generate jwt authentication", "jwt setup", "token auth config".
セキュアな開発・運用のための実装指針、機密情報管理、通信の確保、入力値検証、依存ライブラリ管理のガイドラインを定義する。セキュリティ実装時、認証・認可実装時、API開発時、またはユーザーがセキュリティ、機密情報、暗号化、XSS対策、SQL injection、脆弱性管理に言及した際に使用する。
Use when user requests autonomous operation or AUTO_MODE. Guide through authorization and activation via policy discovery.