702 个 · 按相关度排序
Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.
中文简介正在准备中。当前显示英语简介。
Review password fields for security and ease of use. Check autocomplete settings, accessible visibility controls, strength indicators, and password manager support, then verify relevant browser and HTTP behavior in an environment resembling production.
中文简介正在准备中。当前显示英语简介。
Audit whether a website serves all pages over HTTPS with valid TLS certificates, which secure connections. Check certificate coverage and expiration, permanent redirects from HTTP, and HTTPS URLs for internal links and resources, then review the necessary configuration changes.
中文简介正在准备中。当前显示英语简介。
Review communication between different websites for security issues. Inspect code and browser behavior to identify overly broad CORS permissions, unchecked message senders, missing request protections, and unsafe redirects, then propose fixes and browser checks.
中文简介正在准备中。当前显示英语简介。
Study Model Context Protocol (MCP), which connects AI applications with external tools, through guided lessons and exercises. Inspect requests and responses, practice implementation and security checks, and record progress alongside observed results.
中文简介正在准备中。当前显示英语简介。
Assess an application against OWASP Top 10:2025 risk categories using Strix. Get findings backed by working exploit examples, organized by category, with clear explanations of what was tested and what remains unassessed.
中文简介正在准备中。当前显示英语简介。
Review source code with Strix to trace data flow and authorization checks, then test suspected vulnerabilities in a running environment. Receive proven findings with exploit examples and code locations, while keeping unconfirmed observations clearly identified.
中文简介正在准备中。当前显示英语简介。
Check password-manager warnings for exposed passwords and prepare official reset pages for affected accounts. The user enters and submits each replacement, while the skill tracks password changes, authorized saves, and fresh sign-in checks separately.
中文简介正在准备中。当前显示英语简介。
Implement and review API security within an application's existing authentication and data model. Covers token verification, resource permissions, input validation, request limits, secrets, and logging, with concrete checks for unauthorized access and invalid requests.
中文简介正在准备中。当前显示英语简介。
Design traffic controls for AI inference services using Istio configuration examples. Covers mutual authentication, model version routing, gradual releases, retry limits, failure containment, and monitoring, with guidance for validating changes on the target cluster.
中文简介正在准备中。当前显示英语简介。
Design layered protections for AI agents against malicious instructions, tool misuse, and data leakage. Provides guidance and code examples for input checks, isolated tool execution, permission limits, and audit logging to help review and strengthen agent security.
中文简介正在准备中。当前显示英语简介。
Define security controls for AI coding agents used by a team. Covers command and file permissions, secret scanning, isolated execution environments, code review gates, and audit trails, with configuration examples to adapt.
中文简介正在准备中。当前显示英语简介。
Analyze running iOS apps in a CTF sandbox, a controlled challenge environment. Trace methods, inspect secure storage, and examine request signing and certificate checks to identify the state needed to reproduce an accepted request.
中文简介正在准备中。当前显示英语简介。
Build Stripe payment flows for one-time purchases and subscriptions. The skill covers checkout options, customer payment methods, refunds, and webhooks, which notify an application about payment events, with examples for testing payment behavior.
中文简介正在准备中。当前显示英语简介。
Structure mobile apps built with React Native and Expo. Covers navigation, state management, device feature integration, offline data synchronization, and performance practices, helping developers organize projects and account for differences between iOS and Android.
中文简介正在准备中。当前显示英语简介。
Review and write Solidity smart contracts with security in mind. Address reentrancy, where external calls trigger repeated execution, along with numeric overflow and access control issues, using implementation patterns, security tests, and documentation for audit preparation.
中文简介正在准备中。当前显示英语简介。
Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.
中文简介正在准备中。当前显示英语简介。
Plan and implement user login and access permissions using sessions, JWT tokens, or OAuth2. Apply role-based permissions, protect APIs, and review common weaknesses in password handling, cookies, token expiration, and server-side checks.
中文简介正在准备中。当前显示英语简介。
Review MCP configurations for exposed credentials, risky command patterns, and package versions that can change unexpectedly. Produce a report with severity levels and suggested fixes without running the commands defined in the configuration.
中文简介正在准备中。当前显示英语简介。
Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.
中文简介正在准备中。当前显示英语简介。
Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.
中文简介正在准备中。当前显示英语简介。
Plan and implement connections between Arduino devices and Azure IoT Hub, directly or through an IoT Edge gateway. Define sensor messages, device credentials, offline buffering, remote commands, and implementation tasks for firmware, gateways, and cloud services.
中文简介正在准备中。当前显示英语简介。
Assess Bluetooth Low Energy devices by capturing wireless traffic, inspecting available data services, and checking pairing security. Identify signs of interception, reused commands, and data access that lacks authentication.
中文简介正在准备中。当前显示英语简介。
Inspect DNP3 traffic, a communication protocol used in industrial control systems, for unauthorized sources and unexpected commands. The skill compares captured traffic with normal patterns and reports suspicious control actions, restarts, and file operations.
中文简介正在准备中。当前显示英语简介。