Secure Coding

drnabeelkhan Skill

Enforces a read-only rule for filesystem junctions and symlinks, blocking writes, deletes, and git commits that resolve outside the current project root.

drnabeelkhan Skill

Applies the DevSecOps framework to structure analysis, guide decision-making, and produce actionable recommendations for engineering and operations contexts.

nimoqup046-collab Skill

Guides Firebase development with best practices for security rules, data modeling, and avoiding common pitfalls.

sakamoto-family-smile Skill

Secure Perl applications against injection, taint, and web vulnerabilities with validated patterns for input handling, file operations, process execution, and DBI queries.

sakamoto-family-smile Skill

Hardens Django applications against common vulnerabilities with production settings, authentication, authorization, SQL injection and XSS prevention, and secure deployment configurations.

sakamoto-family-smile Bundle

Provides a security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data handling.

sakamoto-family-smile Skill

Secure Quarkus applications with authentication, authorization, input validation, and secrets management best practices.

sdiamante13 Bundle

Performs structured code reviews of git branches, tracking findings in a living document and optionally running deep architectural analysis with subagents.

joshuashepherd Skill

Adds input and output guardrails to an agent, including validation, content filtering, domain scoping, and rate limiting, with TypeScript examples and wiring instructions.

luokai0 Bundle

Scans Python and JavaScript codebases for bugs, security vulnerabilities, code smells, and anti-patterns, producing a prioritized fix list with line numbers, severity ratings, and suggested corrections.

luokai0 Bundle

Builds, configures, and manages AWS Cognito user pools, identity pools, authentication flows, and integrations with other AWS services.

jorcan Bundle

Runs a structured security audit across six phases: attack-surface mapping, STRIDE/PASTA threat modeling, technical checklists, red/blue team analysis, and a final verdict, with optional Python automation scripts.

jorcan Bundle

Provides guidance on Firebase best practices, including security rules, data modeling, and avoiding common pitfalls.

huuanh20 Bundle

Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.

neuralblitz Skill

Provides expert-level guidance on implementing and applying app security concepts, including design, optimization, debugging, and best practices.

mhassan0000 Skill

Prevents destructive operations on production systems and restricts edits to a specified directory when running agents autonomously.

diegosouzapw Bundle

Guides building secure admin panels with RBAC, audit logging, and step-up controls for privileged actions.

chimeranext Skill

Implements layered security for Flutter apps: code obfuscation, certificate pinning, secure storage, encryption, biometric authentication, and root/jailbreak detection.

vikingokft Bundle

Audits frontend codebases for security vulnerabilities and bad practices, covering XSS, CSRF, DOM issues, CSP, input validation, file uploads, and Node.js/NPM dependencies across web, React, Astro, Twig, Node.js, and Bun.

vikingokft Skill

Enforces the Vikingo Studio standard for WordPress plugins and repos: naming taxonomy, plugin headers, folder structure, versioning, release flow, private update channel, admin UI rules, security baseline, and pre-release checklist.

vikingokft Skill

Audits WordPress plugin and theme PHP code for advanced security issues beyond basic sanitization, including object injection, SSRF, CSRF, mass assignment, file inclusion, mail header injection, ZipSlip, type juggling, and TOCTOU races.

vikingokft Bundle

Audits WordPress plugin or theme PHP code for common security mistakes including missing nonce checks, capability checks, input sanitization, output escaping, SQL preparation, AJAX exposure, file traversal, and unsafe redirects.

vikingokft Bundle

Build WordPress admin tables by extending WP_List_Table, covering required overrides, pagination, bulk actions, and CSRF protection.

tools-only Bundle

Use this checklist before deploying any OAuth application to production.

nagarenegishi Bundle

Enforces OWASP Top 10:2025 compliance on code touching security-relevant domains, using cached cheat sheets and verifying fixes against OSV.dev.

phoroth Skill

Covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Storage, and Hosting, with patterns for security rules, data modeling, and real-time listeners.

shulkwisec Skill

Detect and exploit Cross-Site Request Forgery vulnerabilities by testing for missing or predictable CSRF tokens, absent SameSite cookie attributes, and JSON endpoints accepting text/plain Content-Type, with payloads and bypass techniques for security testing.

shulkwisec Bundle

Performs a white-box source code security review structured around OWASP ASVS 5.0, mapping attack surfaces, tracing data flows, and chaining into downstream penetration testing and threat modeling skills.

shulkwisec Bundle

Provides exact payloads and bypass techniques for every PortSwigger JWT authentication lab variant, from unverified signatures to algorithm confusion attacks.

shulkwisec Skill

Generates specific, implementable fixes for each vulnerability finding, producing code patches, configuration changes, dependency updates, and IaC fixes with before/after code and verification steps.

addyosmani Skill

Hardens code against vulnerabilities by applying threat modeling, OWASP Top 10 prevention patterns, and secure coding practices for web applications.

antigravity Skill

Design secure, scalable Firebase backends with Firestore, Auth, Functions, and Storage, following best practices for security rules, data modeling, and real-time listeners.

antigravity Skill

Verifies that fix commits properly address security audit findings without introducing new bugs or vulnerabilities.

adobe Bundle

Routes user requests to specialist skills for AEM 6.5 LTS Dispatcher configuration, troubleshooting, performance tuning, security hardening, and lifecycle orchestration.

getsentry Skill

Reviews local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist and attack surface mapping.

getsentry Bundle

Conducts systematic security code reviews to identify exploitable vulnerabilities, reporting only high-confidence findings after researching the codebase.