Loading...
Loading...
Found 102 Skills
Review code for OWASP Top 10 vulnerabilities — SQL/command injection, XSS, broken auth/authorization, hardcoded secrets, and insecure data handling. Includes Supabase-specific checks. Use when reviewing code for security, auditing a diff, or checking a feature before it ships.
Security best practices for secure coding, authentication, authorization, and data protection. Use when developing features that handle sensitive data, user authentication, or require security review.
Guideline for designing, implementing, and verifying secure Python applications following OWASP Top 10 best practices. Use when the user wants to: (1) review Python code for security vulnerabilities, (2) design a secure Python application architecture, (3) implement security features (authentication, authorization, cryptography, input validation), (4) audit Python dependencies for known vulnerabilities, (5) create security checklists or verification plans, (6) fix security bugs or harden existing Python code, (7) set up security testing and static analysis (bandit, safety, semgrep), or (8) handle any Python security concern including injection prevention, secure deserialization, SSRF protection, secrets management, and secure deployment.
OWASP Top 10 security audit and secure coding guidelines for Laravel + React/Inertia.js applications. Use when auditing for vulnerabilities ("run OWASP audit", "security review", "check my app security") or writing secure Laravel code involving auth, payments, file uploads, or API design. Triggers on security-related tasks, payment handling, authentication, or any request to audit a Laravel codebase.
A collection of Java development standards based on the Alibaba Java Development Manual (Songshan Edition). It covers seven areas: coding conventions, exceptions and logging, unit testing, security standards, MySQL databases, project structure, and design conventions. Use this skill when the user needs to: (1) write or review Java code, (2) check naming/code standards, (3) handle exceptions and logging, (4) write unit tests, (5) perform secure coding, (6) design databases, or (7) design project architectures. Trigger terms: Java standards, Alibaba standards, coding standards, development manual, coding conventions, exception handling, unit testing, security, MySQL, project structure, design patterns.
Prevent, detect, and repair AI coding slop and dirty engineering in repositories. Use for planning features, writing code, changing tests, reviewing pull requests, refactoring, hardening CI, debugging regressions, or auditing agent-generated changes. Enforces behavioral contracts, focused diffs, test integrity, repo conventions, security boundaries, and evidence-based completion.