531 skills · sorted by relevance
Implement GCP Binary Authorization to enforce Dağıt:-time security controls that ensure only trusted, attested container images are Dağıtılmış to Google Kubernetes Engine and Cloud Run.
The English summary is being prepared. Showing the original description.
Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to Belirle: if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk ...
The English summary is being prepared. Showing the original description.
tespit etmeand test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.
The English summary is being prepared. Showing the original description.
Use when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated / @PermitAll, SecurityIdentity, permission checks, path-based authorization in configuration, exception mapping for auth failures, and sensitive-data-safe logging. This should trigger for requests such as Add Quarkus security support; Review Quarkus security configuration; Improve API authorization in Quarkus; Add JWT/OIDC security in Quarkus; Harden Quarkus authorization rules. Part of cursor-rules-java project
The English summary is being prepared. Showing the original description.
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.
The English summary is being prepared. Showing the original description.
Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.
The English summary is being prepared. Showing the original description.
Review Django authentication, permissions, input handling, and production settings. Use concrete configuration and code examples to address malicious queries, unwanted requests, injected scripts, unsafe uploads, and API access, alongside secret management and security logging.
Prepare restaurant orders for delivery or pickup by comparing options, building a cart, and checking the full cost and timing. Account for dietary requirements, obtain authorization to order, and confirm acceptance and available tracking details.
Find practical meeting or appointment times while accounting for availability, working hours, travel, and time zones. Arrange private holds or invitations, reschedule or cancel within authorization, and distinguish proposed times from confirmed bookings.
Guide Git operations with explicit authorization for history changes and destructive actions. It defines recovery snapshots before discarding work, careful handling of locks and index corruption, and checks that keep unexplained changes out of commits.
Helps build LabArchives connections for electronic lab notebooks and laboratory inventory. Guides endpoint selection, request signing for authentication, and user authorization, with local tools to inspect container files and prepare redacted request plans before remote operations.
Manage a Binance Web3 wallet through the baw command-line tool. Check balances, transfer or swap tokens, manage limit orders and token permissions, and access prediction markets and DeFi, blockchain-based financial services.
Route reverse engineering and security tasks to a specialist skill based on the target, purpose, and available tools. Establish the case scope and authorization status, then prepare supported tools before handing off the work.
Prepare a specified software version for release by checking version consistency and changelog readiness, building packages, and testing basic behavior. Produce checksums, release notes, and a readiness report; public release actions require separate authorization.
Review incoming GitHub issues and pull requests, verify claims, and organize evidence alongside existing decisions. Prepare unresolved choices with recommendations and consequences for maintainers, then carry out actions covered by verified authorization without merging changes.
Assess REST, GraphQL, and gRPC APIs for authentication, access control, input validation, and business logic weaknesses. Use OWASP API Security Top 10, a framework of common API risks, to organize testing and document findings with reproduction steps and remediation.
Choose an authentication flow for a Zoom integration, define scopes that control access, and understand token renewal. Use the reference examples and error tables to investigate failed authorization or token requests.
Build web apps that run inside the Zoom client using SDK setup guidance, authorization examples, shared participant state, and custom video layouts. The reference also helps diagnose blank panels, missing capabilities, and other runtime problems.
Guide changes to cmux CLI and socket commands with rules for thread use, app focus, and remote relay authorization. It helps keep frequent status updates off the main thread and preserve focus during background automation.
Audit and strengthen security for applications running on GKE. Configure pod traffic restrictions, sandbox isolation, namespace security standards, and Secret Manager volume mounts to protect workloads at the application and namespace level.
Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.
Route Convex development and operations requests to the relevant specialist skills and current procedures, covering app setup, backend features, code reviews, authorization checks, production monitoring, data migrations, and cost analysis.
Combine Convex authorization, code quality, performance, and failure audits into one readiness report. It removes duplicate findings, scores confirmed issues with a stated formula, and orders the fixes while clearly identifying checks that could not run.
Compares code relationships before and after a branch, pull request, or release change using Trailmark. Flags structural security regressions, such as removed authorization checks or newly reachable sensitive operations, and provides evidence for reviewers.