搜索
搜索结果
574 results for "security"
llm-trading-agent-security
Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling. Use when an autonomous agent holds wallet or transaction authority and its limits, simulation, or key handling need review.
affaan-mdefi-amm-security
Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math. Use when auditing or writing Solidity AMM, liquidity pool, or swap code.
affaan-mquarkus-security
Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security. Use when reviewing Quarkus authn/authz, JWT or OIDC, RBAC, validation, or secrets.
affaan-msecurity-bounty-hunter
Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.
affaan-msecurity-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
affaan-mdjango-security
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
affaan-mspringboot-security
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
affaan-mlaravel-security
Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.
affaan-msecurity-scan
Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.
affaan-mquarkus-security
Quarkus 安全最佳实践，涵盖身份验证、授权、JWT/OIDC、RBAC、输入校验、CSRF 防护、密钥管理及依赖项安全。
affaan-mdefi-amm-security
针对Solidity AMM合约、流动性池和交换流程的安全检查清单。涵盖重入攻击、CEI顺序、捐赠或通胀攻击、预言机操纵、滑点、管理员控制和整数运算。
affaan-mllm-trading-agent-security
面向拥有钱包或交易权限的自主交易代理的安全模式。涵盖提示注入、支出限制、发送前模拟、断路器、MEV保护和密钥处理。
affaan-msecurity-bounty-hunter
在仓库中寻找可利用、值得领取赏金的安全问题。专注于远程可触达的漏洞，这些漏洞符合真实报告的条件，而非嘈杂的仅本地发现。
affaan-mlaravel-security
Laravel 安全最佳实践 — 包含身份验证、权限授权、Eloquent 操作安全、CSRF 与 XSS 防御、API 安全以及生产环境安全部署配置。
affaan-mdjango-security
Django 安全最佳实践，涵盖身份验证、授权、CSRF 保护、SQL 注入防护、XSS 防护以及安全部署配置。
affaan-mspringboot-security
Spring Security 在 Java Spring Boot 服务中用于身份验证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全的最佳实践。
affaan-msecurity-scan
使用 AgentShield 扫描您的 Claude Code 配置（.claude/ 目录），检查安全漏洞、配置错误和注入风险。检测 CLAUDE.md、settings.json、MCP 服务器、hooks 和代理定义。
affaan-msecurity-review
在添加身份验证、处理用户输入、使用密钥、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。
affaan-m
security-and-hardening
强化代码以抵御漏洞。适用于处理用户输入、身份验证、数据存储或外部集成时。适用于构建任何接受不可信数据、管理用户会话或与第三方服务交互的功能。
addyosmani
agent-security-manager
Agent skill for security-manager - invoke with $agent-security-manager
ruvnetagent-v3-security-architect
Agent skill for v3-security-architect - invoke with $agent-v3-security-architect
ruvnet
security-research
Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.
code-yeongyusecurity-audit
Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implementation, authorization logic, payment processing, user data handling, API endpoint creation, file upload handling, database queries, external API integration. Skip when: read-only operations on public data, internal development tooling, static documentation, styling changes.
ruvnet
find-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user asks to security-scan, security-review, or audit their code, repo, or pull request for vulnerabilities.
usestrix