安全性
2492 skills in 測試與安全 > 安全性
remediation-crypto
Security fix patterns for cryptographic vulnerabilities (weak algorithms, insecure randomness, TLS issues). Provides language-specific secure implementations.
agentuity-cli-cloud-vector-search
Search for vectors using semantic similarity. Requires authentication. Use for Agentuity cloud platform operations
cloudflare-mcp-server
Build Model Context Protocol (MCP) servers on Cloudflare Workers - the only platform with official remote MCP support. TypeScript-based with OAuth, Durable Objects, and WebSocket hibernation. Use when: deploying remote MCP servers, implementing OAuth (GitHub/Google), using dual transports (SSE/HTTP), or troubleshooting URL path mismatches, McpAgent exports, OAuth redirects, CORS issues.
agentuity-cli-cloud-sandbox-snapshot-create
Create a snapshot from a sandbox. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-secret-pull
Pull secrets from cloud to local .env file. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-thread-list
List recent threads. Requires authentication. Use for Agentuity cloud platform operations
api-design
This skill should be used for REST API, GraphQL, versioning, pagination, authentication, backend routes, web services, HTTP endpoints, server API design
agentuity-cli-cloud-sandbox-delete
Delete a sandbox. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-sandbox-snapshot-list
List snapshots. Requires authentication. Use for Agentuity cloud platform operations
credential-recovery-protocol
Execute secure credential recovery procedures.
auth-flow
IntelliFill authentication flow patterns using Supabase Auth, JWT tokens, and backend auth mode
rails-security-audit
Comprehensive security auditing for Rails 8 applications using Brakeman and manual review. Use when reviewing authentication/authorization code, checking for OWASP Top 10 vulnerabilities, or validating security before deployment.
agentuity-cli-auth-login
Login to the Agentuity Platform using a browser-based authentication flow. Use for managing authentication credentials
goth-fundamentals
This skill should be used when the user asks to "set up goth", "install goth", "oauth in go", "authentication in golang", "goth package", "goth basics", or mentions "github.com/markbates/goth". Provides foundational guidance for the Goth multi-provider authentication library.
infra-terraform
Enforces Terraform best practices for safe and scalable infrastructure as code. Emphasizes modularity, state management, and security. Automatically applied for IaC implementation.
gh-cli-setup
Use when gh CLI is not installed, not configured, or authentication fails - provides installation steps, authentication methods, and troubleshooting for all platforms
agentuity-cli-cloud-secret-import
Import secrets from a file to cloud and local .env. Requires authentication. Use for Agentuity cloud platform operations
databricks-apps-cookie-auth
Guide for authenticating with Databricks Apps using cookie-based auth when OAuth/PAT tokens don't work. Use when connecting to Databricks Apps with User Authorization enabled.
using-firebase
Comprehensive Firebase development guidance for GCP-hosted applications. Covers Firestore database operations (CRUD, queries, transactions, data modeling), Cloud Functions (1st and 2nd generation, TypeScript and Python, all trigger types), Firebase CLI operations, emulator setup and data persistence, security rules (Firestore and Storage), authentication integration, hosting configuration, and GCP service integration. Use when working with Firebase projects, deploying Cloud Functions, querying Firestore, setting up triggers (Firestore, Auth, Storage, HTTP, Callable, Scheduled, Pub/Sub), managing security rules, configuring hosting rewrites/headers, managing secrets, or integrating with GCP services like BigQuery and Cloud Tasks. Triggers include firebase, firestore, cloud functions, firebase functions, firebase hosting, firebase auth, firebase storage, firebase emulator, firebase deploy, firebase init, firebase rules, callable function, scheduled function, onDocumentCreated, onRequest, onCall, onSchedule.
remediation-injection
Security fix patterns for injection vulnerabilities (SQL, Command, XSS). Provides language-specific code examples showing vulnerable and secure implementations.