Audit sicurezza OWASP avanzato per pre-lancio. Checklist completa. Trigger: "audit sicurezza", "OWASP", "penetration test", "security review"
Idioma del texto original: italiano
Menú
Skills en este repositorio
SkillsMP ha recopilado 2449 skills de aibot88/sec_skill_store. Abre una skill para revisar su origen y sus detalles.
aibot88/sec_skill_storeMostrando 40 de 2449 skills recopiladas.
Audit sicurezza OWASP avanzato per pre-lancio. Checklist completa. Trigger: "audit sicurezza", "OWASP", "penetration test", "security review"
Idioma del texto original: italiano
Pattern Supabase: RLS, Edge Functions, Realtime, Storage, Auth, migration. Trigger: "supabase", "RLS", "edge function", "realtime subscription"
Idioma del texto original: italiano
Use when adding background tasks or event integration to a scaffolded FastAPI service after the broker and contracts are declared in backend-architecture. Adds Celery/RQ/arq or Kafka wiring, a transactional outbox, idempotent consumers, retry/DLQ, and…
Idioma del texto original: inglés
FastAPI com endpoints async, Pydantic v2 e dependency injection
Idioma del texto original: portugués
Use when adding auth/authz, HTTP-surface hardening, or an OWASP review to a scaffolded FastAPI service after the auth provider decision is approved or deferred. Adds the authentication, default-deny authz, hardening, and security-test layer the scaffold…
Idioma del texto original: inglés
FastAPI routes, services, auth JWT, streaming, error handling, OpenAI integration
Idioma del texto original: inglés
Build FastAPI applications with async patterns, Pydantic validation, dependency injection, and modern Python API practices.
Idioma del texto original: inglés
Master FastAPI dependency injection for building modular, testable APIs. Use when creating reusable dependencies and services.
Idioma del texto original: inglés
[Extends backend-developer] Python FastAPI specialist. Use for FastAPI apps, async endpoints, Pydantic v2, SQLAlchemy async, dependency injection. Invoke alongside backend-developer for Python API projects.
Idioma del texto original: inglés
Guide for creating FastAPI endpoints following this project's conventions including routers, dependency injection, error handling, and OpenAPI documentation.
Idioma del texto original: inglés
Use when making a scaffolded FastAPI service production-observable after reliability SLO targets are approved or deferred. Replaces the telemetry seam with OpenTelemetry, prometheus-client RED metrics, trace-correlated structlog, and SLO/burn-rate alerts. Not…
Idioma del texto original: inglés
Use when hardening a scaffolded FastAPI service for load and failure after performance budgets and SLO targets are approved or deferred. Adds async-path discipline, the worker model, pool sizing, caching, breakers/bulkheads, retry budgets, and a CI load-test…
Idioma del texto original: inglés
WHEN: FastAPI project review, Pydantic models, async endpoints, dependency injection WHAT: Pydantic validation + Dependency injection + Async patterns + OpenAPI docs + Security WHEN NOT: Django → django-reviewer, Flask → flask-reviewer, General Python →…
Idioma del texto original: inglés
Use when scaffolding or production-hardening a FastAPI service shell after backend architecture is approved or deferred. Produces the settings/logging/health/error-handling/lifespan/DI/container baseline the other FastAPI skills extend. Not for auth,…
Idioma del texto original: inglés
Verification loop for FastAPI projects: type checking, linting, tests with coverage, security scans, and API schema validation before release or PR.
Idioma del texto original: inglés
Expert guidance for using the FeatBit REST API to manage projects, environments, and feature flags programmatically. Use when user asks about "FeatBit API", "REST API", "create project API", "create environment API", "create feature flag API", "API…
Idioma del texto original: inglés
機能フラグ(Feature Flag/Feature Toggle)による段階的リリースとA/Bテスト実装スキル。 リスク管理とカナリアリリースを可能にし、本番環境での安全な機能展開を実現します。 Anchors: • Feature Toggles (Pete Hodgson - Martin Fowler blog) / 適用: フラグ設計パターン / 目的: Release/Experiment/Ops/Permission Togglesの適切な使い分け • Continuous Delivery…
Idioma del texto original: japonés
Draft detailed engineering specs from an approved PRD. Use when generating or updating the engineering specification for a feature, before implementation begins.
Idioma del texto original: inglés
Query federation audit logs with compliance filtering
Idioma del texto original: inglés
外部IdP連携(Federation/SSO)機能の開発・設定を行う際に使用。Google、Azure AD、カスタムOIDCプロバイダー連携、userinfo_mapping_rules設定、oauth-extension実装時に役立つ。
Idioma del texto original: japonés
Fetch raw feed items from feed-server to Inbox/feeds/raw/ with dedupe and noise filter. Does NOT summarize, classify P0-P3, write knowledge notes, or update daily note — those steps are removed (2026-05-01 redesign: AI no longer authors substance into…
Idioma del texto original: inglés
Manages OrchestKit learning system including feedback status, usage pattern tracking, and privacy/analytics consent. Supports pause/resume learning, data export, privacy policy display, and bug reporting. Tracks learned patterns and agent performance metrics.…
Idioma del texto original: inglés
Fetch Semicolon team standards from docs wiki. Use when (1) providing workflow or process advice, (2) recommending DevOps strategies, (3) referencing team conventions for decision-making, (4) checking team standards compliance.
Idioma del texto original: inglés
Focuses on routing, CSRF protection, context handling, and template usage within the internal handlers directory.
Idioma del texto original: inglés
FIDO2/WebAuthn/パスキー関連の実装・設定・ドキュメント・テストを扱う時に使用。パスキー登録、認証、管理、アテステーション検証に関する作業で自動的に呼び出される。
Idioma del texto original: japonés
Use when async Apex (Queueable, Batch, Schedulable, @future) needs to honor the originating user's field-level security but the framework runs the job in a different security context than the user who initiated it. Triggers: 'fls bypassed in batch apex',…
Idioma del texto original: inglés
Reads a paper figure by figure before re-integrating the full narrative, so the user can identify the core findings quickly and check whether each visual actually supports the authors' main claims. Always separate figure content, figure-linked claim,…
Idioma del texto original: inglés
Encrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for sharing.
Idioma del texto original: inglés
Trademark filing procedures covering EUIPO (EU), USPTO (US), and WIPO Madrid Protocol (international). Walks through pre-filing conflict checks, Nice classification, descriptiveness assessment, mark type decisions, filing basis strategy, office-specific…
Idioma del texto original: alemán
Use when designing malware and content scanning for files uploaded to Salesforce (Files, Attachments, ContentVersion) — external scanning service callouts, quarantine patterns, and user-facing messaging. Triggers: 'virus scan salesforce upload', 'malware scan…
Idioma del texto original: inglés
Batch-generate per-author ICMJE Conflict of Interest Disclosure Forms (`coi_disclosure.docx`) for manuscript submission. Pre-fills all 13 disclosure items as "☒ None" + final certification ☒ using a synthetic seed template shipped with the skill, then clones…
Idioma del texto original: inglés
Scrive articoli blog in italiano per FIM Insurance Broker, seguendo il tone of voice del sito, la struttura JSON esistente e le regole di compliance IVASS. Usa quando l'utente chiede di "scrivere un articolo", "creare un post blog", "aggiungere contenuto…
Idioma del texto original: italiano
Install the quality line every pie passes through before going on display — wire CI/CD, E2E testing, design-system compliance, and visual-regression gates. Run once before /sell-slice; also invocable standalone on any project.
Idioma del texto original: inglés
Finalizuje tworzenie nowego wydania newslettera - zamyka serwer, czyści pliki CSV, commituje zmiany na osobnym branchu i tworzy zaplanowany Pull Request. Reaguje na polecenie takie jak np. "Ukończ tworzenie wydania".
Idioma del texto original: polaco
Automatically finalize pull requests for merge by resolving CodeQL violations, review threads, merge conflicts, and CI failures. Handles single PR (current branch or by number), all open PRs in the repo, or all open PRs across the org. Includes bot-authored…
Idioma del texto original: inglés
Vérification de conformité pour applications fintech — PCI-DSS, KYC/AML, PSD2, RGPD appliqué aux données financières. À utiliser quand l'utilisateur développe une application de paiement, un wallet ou un service financier et doit vérifier la conformité…
Idioma del texto original: francés
Produces excellence-grade EU grant narratives, budget justifications, and scoring diagnostics that consistently reach ≥4.6/5 (13.8/15 Horizon scale). Integrates constitutional AI framing, Oracle-validated evidence, and EU cost compliance to feed Grant…
Idioma del texto original: inglés
Use when the user asks for 'bangers' on X (Twitter) - breakout tweets with exceptional engagement relative to the author's usual performance. Surfaces anomalously high-performing tweets for inspiration or trend-spotting. Read-only.
Idioma del texto original: inglés
Use whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed SOC, IAM, cloud security, and AppSec. Triggers on "find me a pen-testing firm for…
Idioma del texto original: inglés
Use whenever the user wants to find, shortlist, vet, or enrich US B2B law firms — corporate, IP/patent, M&A and securities, employment, commercial litigation, regulatory/compliance, data privacy/cyber, real estate, and tax. Triggers on "find three boutique IP…
Idioma del texto original: inglés