1.5K skills · sorted by relevance
Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.
The English summary is being prepared. Showing the original description.
Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
The English summary is being prepared. Showing the original description.
Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems.
The English summary is being prepared. Showing the original description.
Identify and exploit authentication and session management vulnerabilities in web applications. Broken authentication consistently ranks in the OWASP Top 10 and can lead to account takeover, identity theft, and unauthorized access to sensitive systems.
The English summary is being prepared. Showing the original description.
Implement secure authentication and authorization systems with JWT, OAuth2, Session-based auth, and RBAC. Use when: (1) implementing user login/signup, (2) setting up JWT tokens, (3) OAuth2 integration (Google, GitHub, etc.), (4) role-based access control (RBAC), (5) password hashing and validation, (6) session management, (7) API authentication middleware, (8) 2FA/MFA setup. Triggers: "authentication", "login", "JWT", "OAuth", "session", "password hash", "RBAC", "permissions", "2FA".
The English summary is being prepared. Showing the original description.
Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized security assessments.
The English summary is being prepared. Showing the original description.
Test Slack authentication, message creation and cleanup, and OpenClaw message handling. Collect evidence from stored messages and test runs, while distinguishing what API checks prove from interactions that require observation in the actual Slack client.
Work with X through authenticated commands for posting, replying, searching, direct messages, and media uploads. Read posts, inspect followers and authentication status, or call v2 API endpoints directly when a shortcut command does not cover the task.
Diagnose why an OpenClaw browser interface or native app cannot connect. Check the network route, authentication, device pairing, and reconnect behavior against one specific Gateway, the connection server, then verify a fresh connection.
Map the impact of a proposed change using real dependencies and project documentation. Identify affected code, data, interfaces, tests, and release steps, then compare the implemented changes with the plan to expose gaps and unverified risks.
Structure server-side applications with practical patterns for Node.js, Express, and Next.js API routes. Covers API design, database queries, caching, authentication, error handling, and background jobs, with examples that separate business rules from data access.
Review authentication, payments, and APIs for security risks using implementation examples and a predeployment checklist. Covers input validation, access permissions, secret storage, request limits, and checks for sensitive information in logs and errors.
Review Laravel authentication, permissions, database operations, forms, APIs, and production settings for security weaknesses. Use implementation examples to address unsafe input handling, exposed secrets, session risks, and insufficient access controls.
Guides implementation of signup confirmations, password resets, and other application emails through Mailtrap. Covers API authentication, verified sending domains, separate testing environments that capture messages without delivery, and handling failed send requests.
Build or review server-side APIs in Node.js, Express, and Next.js. Apply patterns for organizing business logic and data access, reducing unnecessary database queries, caching results, validating requests, and handling authentication and errors.
Diagnose REST and GraphQL API failures by checking connectivity, authentication, request formats, and returned data. Prepare reproducible commands, identify likely causes, and build regression tests that check whether a fix keeps working.
Set up the 1Password CLI and use stored passwords or API keys in commands and configuration templates. Choose an authentication method, retrieve secret references, and pass credentials to processes through environment variables.
Connect external services to Claude Code plugins through MCP, a protocol that exposes service functions as tools. Get guidance on server configuration, connection methods, authentication, tool permissions, and testing connections and tool calls.
Build MCP servers that let AI access actions and data using mcp-use. The guide covers project setup, reusable prompts, interactive React interfaces, authentication, error handling, and deployment, with reference files for each area.
Helps you integrate hosted browser automation through Browser Use Cloud APIs and Python or TypeScript SDKs. Reference guides cover authentication, sessions, saved browser profiles, live views, and connections to existing agents or workflow services.
Review web application security across user input, authentication, external services, dependencies, personal data, and AI features. Identify threats, apply protective controls, and verify changes with checks covering access permissions, sensitive information, and untrusted model output.
Review a Homecore server operation plan before startup. Check authentication, restoration order, feature tests, speech provider configuration, and handling of pairing secrets. The skill reviews the plan without starting the server.
Start and stop ngrok, Cloudflare, or custom tunnel connections from the command line. Inspect active URLs, connection status, and logs, configure authentication, and test whether a tunnel can be reached from outside.
Synchronize OmniRoute configuration, provider connections, and settings with cloud storage. Manage authentication for the cloud worker, a remote service, along with its credentials and remote backup destinations.