Segurança

Navegue agent skills para auditoria de segurança, scan de vulnerabilidades e autenticação

Categorias, estrelas no GitHub e a data da última atualização na fonte ajudam a organizar e ordenar o catálogo. Esses sinais não são recomendação, certificação de qualidade, análise de segurança nem garantia de adequação. Abra a página do skill e verifique a fonte antes de usar.

96.762 resultados

discord-user-post

openclaw/openclaw

Post an approved message as the logged-in Discord user through the Discord desktop app. Use for release announcements or other direct user-authored Discord posts; not for OpenClaw channel sends, bots, webhooks, relays, agent sessions, or archive search.

Idioma do conteúdo do Skill: inglês

openclaw-ghsa-maintainer

openclaw/openclaw

Inspect, patch, validate, publish, or confirm OpenClaw GHSA security advisories and private-fork state.

Idioma do conteúdo do Skill: inglês

openclaw-release-validation

openclaw/openclaw

Test the latest OpenClaw main commit through an isolated OCM copy or an explicitly approved in-place gateway update, then guide structured release feedback.

Idioma do conteúdo do Skill: inglês

parallels-discord-roundtrip

openclaw/openclaw

Run macOS Parallels smoke with Discord send, host verification, host reply, and guest readback proof.

Idioma do conteúdo do Skill: inglês

release-openclaw-mac

openclaw/openclaw

Run or recover OpenClaw macOS release signing, notarization, appcast, and asset promotion.

Idioma do conteúdo do Skill: inglês

telegram-e2e-userbot

openclaw/openclaw

Prove user-visible OpenClaw Telegram behavior on Telegram's Test Server with Convex-leased team credentials; drive real-user turns and record messages, edits, deletions, reactions, typing, or rich content.

Idioma do conteúdo do Skill: inglês

add-model-provider

openclaw/openclaw

Add and live-prove a model provider with non-interactive config one-liners, without exposing credentials.

Idioma do conteúdo do Skill: inglês

openclaw/openclaw

Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.

Idioma do conteúdo do Skill: inglês

security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Idioma do conteúdo do Skill: inglês

laravel-security

Buenas prácticas de seguridad en Laravel para autenticación/autorización, validación, CSRF, asignación masiva, subida de archivos, secretos, limitación de velocidad y despliegue seguro.

Idioma do conteúdo do Skill: espanhol

quarkus-security

Buenas prácticas de seguridad en Quarkus para autenticación, autorización, JWT/OIDC, RBAC, validación de entrada, CSRF, gestión de secretos y seguridad de dependencias.

Idioma do conteúdo do Skill: espanhol

security-review

Usar este skill al agregar autenticación, manejar entradas de usuario, trabajar con secretos, crear endpoints de API o implementar funcionalidades de pago/sensibles. Proporciona lista de verificación y patrones de seguridad completos.

Idioma do conteúdo do Skill: espanhol

springboot-security

Buenas prácticas de Spring Security para autenticación/autorización, validación, CSRF, secretos, cabeceras, limitación de velocidad y seguridad de dependencias en servicios Java Spring Boot.

Idioma do conteúdo do Skill: espanhol

django-security

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

Idioma do conteúdo do Skill: japonês

kotlin-ktor-patterns

Ktor サーバーパターン（ルーティング DSL、プラグイン、認証、Koin DI、kotlinx.serialization、WebSocket、testApplication テストを含む）。

Idioma do conteúdo do Skill: japonês

laravel-security

Laravel セキュリティベストプラクティス：認証・認可、バリデーション、CSRF、一括割当、ファイルアップロード、シークレット管理、レート制限、安全なデプロイメント

Idioma do conteúdo do Skill: japonês

テイントモード、入力バリデーション、安全なプロセス実行、DBIパラメータ化クエリ、Webセキュリティ（XSS/SQLi/CSRF）、perlcriticセキュリティポリシーを網羅する包括的なPerlセキュリティ。

Idioma do conteúdo do Skill: japonês

quarkus-security

Quarkus認証、認可、JWT/OIDC、RBAC、入力検証、CSRF、シークレット管理、依存関係セキュリティのセキュリティベストプラクティス。

Idioma do conteúdo do Skill: japonês

security-review

認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。

Idioma do conteúdo do Skill: japonês

AgentShield を使用して、Claude Code の設定（.claude/ ディレクトリ）のセキュリティ脆弱性、設定ミス、インジェクションリスクをスキャンします。CLAUDE.md、settings.json、MCP サーバー、フック、エージェント定義をチェックします。

Idioma do conteúdo do Skill: japonês

springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Idioma do conteúdo do Skill: japonês

security-review

인증 추가, 사용자 입력 처리, 시크릿 관리, API 엔드포인트 생성, 결제/민감한 기능 구현 시 이 스킬을 사용하세요. 포괄적인 보안 체크리스트와 패턴을 제공합니다.

Idioma do conteúdo do Skill: coreano

laravel-security

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

Idioma do conteúdo do Skill: turco

quarkus-security

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

Idioma do conteúdo do Skill: turco

security-review

Kimlik doğrulama eklerken, kullanıcı girdisi işlerken, secret'larla çalışırken, API endpoint'leri oluştururken veya ödeme/hassas özellikler uygularken bu skill'i kullanın. Kapsamlı güvenlik kontrol listesi ve kalıplar sağlar.

Idioma do conteúdo do Skill: turco

springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Idioma do conteúdo do Skill: turco

使用 WCAG 2.2 Level AA 标准设计、实施和审计包容性数字产品。运用此技能为 Web 生成语义 ARIA，并为 Web 和原生平台（iOS/Android）生成无障碍特性。

Idioma do conteúdo do Skill: chinês

django-security

Django 安全最佳实践、认证、授权、CSRF 防护、SQL 注入预防、XSS 预防和安全部署配置。

Idioma do conteúdo do Skill: chinês

django-verification

Django项目的验证循环：迁移、代码检查、带覆盖率的测试、安全扫描，以及在发布或PR前的部署就绪检查。

Idioma do conteúdo do Skill: chinês

healthcare-phi-compliance

医疗应用中受保护健康信息（PHI）和个人身份信息（PII）的合规模式。涵盖数据分类、访问控制、审计追踪、加密及常见泄露途径。

Idioma do conteúdo do Skill: chinês

hipaa-compliance

针对医疗隐私和安全工作的HIPAA特定入口点。当任务明确围绕HIPAA、PHI处理、受保实体、BAA、违规态势或美国医疗合规要求时使用。

Idioma do conteúdo do Skill: chinês

kotlin-ktor-patterns

Ktor 服务器模式，包括路由 DSL、插件、身份验证、Koin DI、kotlinx.serialization、WebSockets 和 testApplication 测试。

Idioma do conteúdo do Skill: chinês

laravel-security

Laravel 安全最佳实践，涵盖认证/授权、验证、CSRF、批量赋值、文件上传、密钥管理、速率限制和安全部署。

Idioma do conteúdo do Skill: chinês

nodejs-keccak256

防止 JavaScript 和 TypeScript 中的以太坊哈希错误。Node 的 sha3-256 是 NIST SHA3，而非以太坊 Keccak-256，会静默破坏选择器、签名、存储槽和地址推导。

Idioma do conteúdo do Skill: chinês

parallel-execution-optimizer

当用户希望通过并行工作、并发 agents、批量工具调用、隔离 worktree 或多条独立验证通道来大幅加速任务、同时不损失正确性时使用。

Idioma do conteúdo do Skill: chinês

用于从固定且可审查的提交安装外部 repo-scan 技能的引导指针。在运行跨栈源代码资产审计前需要安装 repo-scan 时使用；此 ECC 指针本身不执行审计。

Idioma do conteúdo do Skill: chinês

具有收敛循环的多智能体对抗验证。两个独立的审查代理必须都通过，输出才能发送。

Idioma do conteúdo do Skill: chinês

security-review

在添加身份验证、处理用户输入、处理机密信息、创建API端点或实现支付/敏感功能时使用此技能。提供全面的安全检查清单和模式。

Idioma do conteúdo do Skill: chinês

springboot-security

Java Spring Boot 服务中认证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全性的 Spring Security 最佳实践。

Idioma do conteúdo do Skill: chinês

security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Idioma do conteúdo do Skill: chinês

django-security

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

Idioma do conteúdo do Skill: inglês

security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Idioma do conteúdo do Skill: inglês

springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Idioma do conteúdo do Skill: inglês

agent-security-hardening

Security hardening guidance for AI agent frameworks that process untrusted content, invoke tools, write workspace files, manage runtime identifiers, or handle credentials. Use when building or reviewing an agent runtime, autonomous worker, tool gateway, memory service, or multi-tenant agent deployment. Do not use for general web application security or offensive testing.

Idioma do conteúdo do Skill: inglês

django-security

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations. Use when reviewing Django authentication, authorization, input handling, or deployment settings.

Idioma do conteúdo do Skill: inglês

kotlin-ktor-patterns

Ktor server patterns including routing DSL, plugins, authentication, Koin DI, kotlinx.serialization, WebSockets, and testApplication testing. Use when building a Ktor server — routing, plugins, auth, DI, serialization, or tests.

Idioma do conteúdo do Skill: inglês

laravel-security

Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations. Use when reviewing Laravel auth, Eloquent safety, CSRF, XSS, API security, or deployment configuration.

Idioma do conteúdo do Skill: inglês

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies. Use when reviewing Perl input handling, process execution, DBI queries, or web-facing code.

Idioma do conteúdo do Skill: inglês