Expert in groups, rings, fields, and algebraic structures with applications to cryptography and number theory
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新
免费在 GitHub 公开
security-best-practices-expert
Application security specialist covering OWASP top 10, secure coding, and vulnerability prevention
中文简介正在准备中。当前显示原文说明。
查看安装方法包含的文件（11）
- SKILL.md2.3 KB
- _toc.md1.0 KB
- modules/application-security.md5.6 KB
- modules/cloud-and-infrastructure.md4.8 KB
- modules/compliance-and-governance.md3.7 KB
- modules/core-guidance.md5.0 KB
- modules/detection-and-response.md4.1 KB
- modules/known-gaps.md963 B
- modules/research-checklist.md1.7 KB
- modules/secure-sdlc.md4.8 KB
- README.md263 B
SKILL.md（原文）
安装前可以查看交给 AI 代理的指令内容。
Security Best Practices Expert
Status: ✅ Research complete Last validated: 2025-11-11 Confidence: 🟢 High — Research backed with Nov 2025 sources – track quarterly updates
How to use this skill
- Establish context using modules/core-guidance.md.
- Embed security into delivery via modules/secure-sdlc.md.
- Harden application layer using modules/application-security.md.
- Protect cloud and infrastructure through modules/cloud-and-infrastructure.md.
- Enhance detection & response with modules/detection-and-response.md.
- Maintain regulatory posture via modules/compliance-and-governance.md.
- Log improvement items in modules/known-gaps.md and revisit modules/research-checklist.md quarterly.
Module overview
- Core guidance — risk intake, threat landscape alignment, stakeholder mapping.
- Secure SDLC — shift-left, tooling, secure delivery pipelines.
- Application security — OWASP mitigations, dependency management, secure coding guidelines.
- Cloud & infrastructure — IaC scanning, secrets, zero trust networking.
- Detection & response — logging, SIEM, incident response.
- Compliance & governance — policy enforcement, audit readiness.
- Known gaps — active research backlog.
- Research checklist — quarterly refresh workflow.
Research status
- Content aligns with latest OWASP, NIST SSDF, NCCoE guidance, CIS v8.1, CNCF security SIG advisories, and 2025 cloud vendor best-practice updates.
- Next targeted review: 2026-02-15 (or earlier if OWASP publishes Top 10 refresh or NIST finalizes SSDF Rev.1).
- Known gaps reduced to niche areas (SBOM automation workflows, post-quantum crypto roadmap, AI security playbooks).
评价
还没有评价。欢迎分享你的使用感受。
评论
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
同一仓库的技能
Expert in Japanese honorific language covering 尊敬語・謙譲語・丁寧語 with deep understanding of situational usage, business contexts, and cultural nuances
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新
Use when planning, scaffolding, validating, or packaging Claude skills inside Advanced Memory MCP.
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新
Structured Zettelkasten workflow for AMD — observe, draft, enrich, retrieve, decide, preview, write, verify. Produces high-quality atomic knowledge cards with deliberate linking.
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新
Master AI debate techniques with comprehensive counter-arguments against slop criticism, safety concerns, philosophical objections, and political rhetoric
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新
Master AI-integrated development environments with comprehensive coverage of Windsurf, Cursor, Antigravity, Zed, Cline, and FOSS newcomers, including intelligent usage patterns, cost optimization, and the evolution toward fully agentic development
中文简介正在准备中。当前显示原文说明。
sandraschi/advanced-memory-mcp202026年10月13日 更新