Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

Loslegen

security-patterns

Sterne29

Forks2

Aktualisiert20. März 2026 um 22:17

Universal security patterns based on OWASP Top 10 and security best practices. Framework-agnostic.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

CarlosDanielDev

CarlosDanielDev/maestro

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	security-patterns
version	1.0.0
description	Universal security patterns based on OWASP Top 10 and security best practices. Framework-agnostic.
allowed-tools	Read, Grep, Glob, WebSearch

Security Patterns

OWASP Top 10 (2021) Quick Reference

#	Category	Key Check
A01	Broken Access Control	Auth checks on every endpoint
A02	Cryptographic Failures	No hardcoded secrets
A03	Injection	Parameterized queries only
A04	Insecure Design	Rate limiting, input validation
A05	Security Misconfiguration	No debug in production
A06	Vulnerable Components	Audit dependencies
A07	Authentication Failures	Brute force protection
A08	Data Integrity	Code signing, safe deserialization
A09	Logging Failures	No sensitive data in logs
A10	SSRF	Validate all URLs

Universal Checklist

No hardcoded secrets in source code
No sensitive data in logs
Input validation on all external boundaries
Dependencies audited for CVEs
Proper error handling (no stack traces exposed)
Encryption for data at rest and in transit

Mehr aus diesem Repository

gleiches Repository

caveman

CarlosDanielDev/maestro

Compressed-prose response style for the orchestrator (opt-in via behavior.caveman_mode). Drops articles, fillers, and transitional prose; preserves code, paths, JSON/TOML, and quoted text verbatim.

2026-04-2529

project-patterns

CarlosDanielDev/maestro

Maestro project patterns — Rust CLI with ratatui TUI, tokio async, Claude CLI process management, and stream-json parsing.

2026-04-2029

example-backend-patterns

CarlosDanielDev/maestro

TEMPLATE - Backend API development patterns. Copy and customize for your backend framework (Express, Django, Spring Boot, FastAPI, etc.)

2026-04-1529

example-frontend-patterns

CarlosDanielDev/maestro

TEMPLATE - Frontend web development patterns. Copy and customize for your frontend framework (React, Vue, Angular, Svelte, etc.)

2026-04-1529

provider-resilience

CarlosDanielDev/maestro

Defensive patterns for GitHub (gh) and Azure DevOps (az) CLI interactions — error handling, idempotency, rate limits, missing resources.

2026-04-1529

api-contract-validation

CarlosDanielDev/maestro

API contract validation patterns for ensuring client-side models match backend JSON responses. Prevents decoding failures from schema mismatches. Tech-stack agnostic.

2026-03-2029

name	security-patterns
version	1.0.0
description	Universal security patterns based on OWASP Top 10 and security best practices. Framework-agnostic.
allowed-tools	Read, Grep, Glob, WebSearch

Security Patterns

OWASP Top 10 (2021) Quick Reference

#	Category	Key Check
A01	Broken Access Control	Auth checks on every endpoint
A02	Cryptographic Failures	No hardcoded secrets
A03	Injection	Parameterized queries only
A04	Insecure Design	Rate limiting, input validation
A05	Security Misconfiguration	No debug in production
A06	Vulnerable Components	Audit dependencies
A07	Authentication Failures	Brute force protection
A08	Data Integrity	Code signing, safe deserialization
A09	Logging Failures	No sensitive data in logs
A10	SSRF	Validate all URLs

Universal Checklist

No hardcoded secrets in source code
No sensitive data in logs
Input validation on all external boundaries
Dependencies audited for CVEs
Proper error handling (no stack traces exposed)
Encryption for data at rest and in transit