安全性
2492 skills in 測試與安全 > 安全性
darkit-gin
基于 gin-gonic/gin 的企业级 Web 框架增强版,提供开箱即用的 JWT 认证、SSE 实时通信、缓存管理、OpenAPI 文档生成等企业级功能。涵盖选项式路由配置、统一响应格式、中间件管理、安全加固、性能优化等完整开发能力。
agentuity-cli-cloud-keyvalue-list-namespaces
List all keyvalue namespaces. Requires authentication. Use for Agentuity cloud platform operations
backend-development
Backend development - APIs, authentication, business logic
fullstack-security
Security and performance - hardening, optimization, auditing
code-review
Code review guidelines for commits and file changes. Covers four categories: Quality (security, correctness, maintainability), Regression (breaking changes, API compatibility), Documentation (code docs, changelogs), and Performance (optimization, efficiency).
Gemini CLI
Consult Google Gemini CLI for second opinions on architecture, debugging, and security audits. Use Gemini's 1M+ context window for comprehensive code analysis. Compare Flash (fast) vs Pro (thorough) vs 3-Pro-Preview (cutting-edge). Use when: need second opinion on architectural decisions, stuck debugging after 2+ attempts, writing security- sensitive code, planning refactors (5+ files), approaching 70%+ context capacity, unfamiliar with tech stack, need peer review, or want Flash vs Pro vs 3-Pro-Preview comparison. Keywords: gemini-cli, google gemini, gemini command line, second opinion, model comparison, gemini-2.5-flash, gemini-2.5-pro, gemini-3-pro-preview, architectural decisions, debugging assistant, code review gemini, security audit gemini, 1M context window, AI pair programming, gemini consultation, flash vs pro, AI-to-AI prompting, peer review, codebase analysis, gemini CLI tool, shell gemini, command line AI assistant, gemini architecture advice, gemini debug help, gemini security scan, gemini code compare
agentuity-cli-cloud-session-logs
Get logs for a specific session. Requires authentication. Use for Agentuity cloud platform operations
security-scanner
Comprehensive security scanner for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues
app-sharing
Manage Glide app access, privacy, authentication, and publishing. Use when configuring who can access an app, setting up sign-in methods, publishing apps, inviting users, or configuring Row Owners for data security.
agentuity-cli-cloud-vector-list-namespaces
List all vector namespaces. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-sandbox-snapshot-delete
Delete a snapshot. Requires authentication. Use for Agentuity cloud platform operations
security-audit
Provides security guidelines for input validation, authentication, authorization, and secure coding practices. Use when implementing auth, handling user input, working with credentials, or conducting security reviews.
agentuity-cli-cloud-stream-list
List recent streams with optional filtering. Requires authentication. Use for Agentuity cloud platform operations
fastapi-backend
Build production-grade FastAPI backends with SQLModel, Pydantic, and JWT authentication. Use this skill when building REST APIs, integrating with Neon PostgreSQL, implementing Better Auth JWT verification, or creating CRUD endpoints. Includes patterns for audit logging, worker/agent parity, and OpenAPI documentation.
security/review
Security Code Review security skill
context-security-resolver
Authentication, authorization, Clerk integration, RLS policies, and security patterns. Use when working with security-resolver code, files, or integration. Invoke when navigating security-resolver codebase, searching for security-resolver files, debugging security-resolver errors, or discussing security-resolver patterns. Keywords: security-resolver, {{KEYWORDS}}
supply-chain-dependency-risks-ai-code
Understand supply chain vulnerabilities and dependency risks in AI-generated code including outdated packages, malicious packages, and dependency confusion attacks. Use this skill when you need to learn about vulnerable dependencies in AI code, understand supply chain attacks, recognize typosquatting, or identify outdated package suggestions. Triggers include "supply chain attacks", "dependency vulnerabilities", "outdated packages", "malicious npm packages", "typosquatting", "dependency confusion", "vulnerable dependencies AI", "npm security".
file-upload
Complete guide for implementing file uploads in IntelliFill with React-dropzone frontend, Multer backend, file validation, Bull queue processing, and security best practices
agentuity-cli-cloud-sandbox-snapshot-get
Get snapshot details. Requires authentication. Use for Agentuity cloud platform operations
iac-security-auditor
Use this skill AFTER a terraform plan has been generated. This skill audits a terraform plan file for security vulnerabilities (using tfsec/checkov) and company compliance policies. It either APPROVES or REJECTS the plan.