Plugins
2 pluginsResults for “secrets”
16 skills
affaan-m Quarkus Security
Secure Quarkus applications with authentication, authorization, input validation, and secrets management.
226k
sakamoto-family-smile Quarkus Security
Secure Quarkus applications with authentication, authorization, input validation, and secrets management best practices.
0
phuryn Shipping Artifacts
Documents AI-built apps with architecture, permissions, secrets, and test coverage maps to make them reviewable before shipping.
22.6k
affaan-m Springboot Security
Provides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.
226k
sakamoto-family-smile Laravel Security
Hardens Laravel applications against common vulnerabilities with guidance on authentication, authorization, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.
0
vikingokft Wp Security Secrets
Audits WordPress plugin and theme code for secret-handling issues: hardcoded credentials, weak randomness, insecure password storage, cookie flags, and secret leakage in logs.
0
More results
affaan-m Security Review
Provides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.
226k · bundle
sakamoto-family-smile Security Review
Provides a security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data handling.
0 · bundle
github Security Review
Scans codebases for security vulnerabilities by reasoning about code context, data flow, and component interactions, covering injection flaws, secrets exposure, authentication issues, and weak cryptography across multiple languages.
36.2k · bundle
getsentry Skill Scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
trailofbits Insecure Defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
6k · bundle
mukul975 Securing Serverless Functions
Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least privilege IAM roles, eliminating hardcoded secrets, scanning dependencies for vulnerabilities, validating input, securing function URLs, and enabling runtime monitoring.
24.6k · bundle
jeffallan Security Reviewer
Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance for code, infrastructure, and cloud environments.
10.4k · bundle
mukul975 Detecting Supply Chain Attacks In CI CD
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.
24.6k · bundle
tinh2 Pentest
Performs a static-analysis penetration test to find exploitable vulnerabilities, providing proof-of-concept payloads and fixes. Covers injection, XSS, authentication bypass, authorization flaws, path traversal, command injection, CSRF, SSRF, hardcoded secrets, and insecure deserialization, with a full attack surface.
13
trailofbits Zeroize Audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
6k · bundle