安全性
2492 skills in 測試與安全 > 安全性
security/secure-c
Secure C Coding security skill
investigation-creation
Create investigations from security events, detections, or LCQL queries. Performs HOLISTIC investigations - not just process trees, but initial access hunting, org-wide scope assessment, lateral movement detection, and full host context. Builds Investigation Hive records documenting findings with events, detections, entities, and analyst notes. Use for incident investigation, threat hunting, alert triage, or building SOC working reports.
agentuity-cli-cloud-env-delete
Delete an environment variable. Requires authentication. Use for Agentuity cloud platform operations
security/terminal
Terminal Security security skill
dependency-analysis
Enhanced dependency analyzer with comprehensive markdown reporting and actionable recommendations. Use when you need to optimize frontend project dependencies, detect security vulnerabilities, identify unused packages, find duplicate functionality, analyze dependency impact, generate cleanup scripts, or produce detailed Markdown reports. Supports JavaScript, TypeScript, Vue, React, Angular, and modern build tools with parallel processing and incremental analysis capabilities.
agentuity-cli-cloud-keyvalue-stats
Get statistics for keyvalue storage. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-project-auth-generate
Generate SQL schema for Agentuity Auth tables. Use for managing authentication credentials
agentuity-cli-cloud-agent-list
List agents for a project. Requires authentication. Use for Agentuity cloud platform operations
custom-plugin-flutter-skill-database
1800+ lines of database architecture mastery - SQLite, Hive, ObjectBox, Firestore, encryption, offline-first, sync with production-ready code examples.
agentuity-cli-cloud-env-pull
Pull environment variables from cloud to local .env file. Requires authentication. Use for Agentuity cloud platform operations
moai-platform-firestore
Firebase Firestore specialist covering NoSQL patterns, real-time sync, offline caching, and Security Rules. Use when building mobile-first apps with offline support, implementing real-time listeners, or configuring Firestore security.
agentuity-cli-cloud-env-get
Get an environment variable value. Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-stream-delete
Delete a stream by ID (soft delete). Requires authentication. Use for Agentuity cloud platform operations
agentuity-cli-cloud-deploy
Deploy project to the Agentuity Cloud. Requires authentication. Use for Agentuity cloud platform operations
varlock
Secure environment variable management with Varlock. Use when handling secrets, API keys, credentials, or any sensitive configuration. Ensures secrets are never exposed in terminals, logs, traces, or Claude's context. Trigger phrases include "environment variables", "secrets", ".env", "API key", "credentials", "sensitive", "Varlock".
owasp-top-10
OWASP Top 10 security vulnerabilities with detection and remediation patterns. Use when conducting security audits, implementing secure coding practices, or reviewing code for common security vulnerabilities.
agentuity-cli-cloud-sandbox-execution-list
List executions for a sandbox. Requires authentication. Use for Agentuity cloud platform operations
secure-error-handling
Implement secure error handling to prevent information leakage and provide appropriate error responses. Use this skill when you need to handle errors in API routes, prevent stack trace exposure, implement environment-aware error messages, or use the error handler utilities. Triggers include "error handling", "handle errors", "error messages", "information leakage", "stack trace", "handleApiError", "production errors", "error responses".
code-review
Perform comprehensive code reviews covering security, style, performance, and best practices. Use when reviewing code changes before commit or merge, auditing existing code, or checking for vulnerabilities.
security-headers
Configure security headers to defend against clickjacking, XSS, MIME confusion, and SSL stripping attacks. Use this skill when you need to set up Content-Security-Policy, X-Frame-Options, HSTS, configure middleware headers, or understand browser security features. Triggers include "security headers", "CSP", "content security policy", "X-Frame-Options", "HSTS", "clickjacking", "MIME confusion", "middleware headers".