Skip to main content
scholarly360
Perfil de criador do GitHub

scholarly360

Visão por repositório de 32 skills coletadas em 5 repositórios do GitHub.

skills coletadas
32
repositórios
5
atualizado
2026-05-31
explorador de repositórios

Repositórios e skills representativas

amendment-general
Advogados

Requires that all changes to the contract be made in writing and signed by authorized representatives of both parties. Prevents informal or unauthorized alterations from undermining the agreed terms.

2026-02-21
assignment-general
AdvogadosParalegais e assistentes jurídicos

Governs whether a party may transfer its rights or obligations under the contract to a third party. Typically requires prior written consent to ensure the other party retains control over who they do business with.

2026-02-21
confidentiality-general
AdvogadosParalegais e assistentes jurídicos

Protects sensitive business information, trade secrets, and proprietary data from unauthorized disclosure to third parties. Applied universally across industries wherever parties exchange information of competitive or strategic value.

2026-02-21
dispute-resolution-general
AdvogadosÁrbitros, mediadores e conciliadores

Outlines the agreed mechanism for resolving conflicts, whether through negotiation, mediation, arbitration, or litigation. Reduces uncertainty and cost by defining a clear path before disagreements escalate.

2026-02-21
entire-agreement-general
AdvogadosParalegais e assistentes jurídicos

Confirms that the written contract is the complete and final understanding, superseding all prior discussions and agreements. Prevents either party from relying on verbal promises, emails, or earlier drafts not included in the signed document.

2026-02-21
force-majeure-general
AdvogadosParalegais e assistentes jurídicos

Excuses or suspends performance obligations when extraordinary events beyond either party's control prevent fulfillment. Covers events such as natural disasters, wars, pandemics, government actions, and widespread infrastructure failures.

2026-02-21
governing-law-general
AdvogadosParalegais e assistentes jurídicos

Analyze, draft, and review Governing Law clauses for General contracts. Use when the user mentions governing law, choice of law, jurisdiction clause, or asks to review, redline, or generate this clause type. Returns structured risk assessment, plain-language summary, and suggested alternative language.

2026-02-21
indemnification-general
AdvogadosParalegais e assistentes jurídicos

Analyze, draft, and review Indemnification clauses for General contracts. Use when the user mentions indemnification, indemnify, hold harmless, or asks to review, redline, or generate this clause type. Returns structured risk assessment, plain-language summary, and suggested alternative language.

2026-02-21
Mostrando as 8 principais de 18 skills coletadas neste repositório.
mishandling-exceptional-conditions
Analistas de segurança da informação

Detect, analyze, and remediate OWASP A10:2025 — Mishandling of Exceptional Conditions in Python web applications (FastAPI and Flask). Use this skill whenever the user asks about error handling security, exception management, fail-open vulnerabilities, stack trace exposure, uncaught exceptions, transaction rollback safety, or resource leaks in exception paths. Also trigger for any OWASP A10 audit, security code review involving try/except blocks, global exception handlers, or HTTP error responses that may leak sensitive information. If the user mentions CWE-209, CWE-248, CWE-636, CWE-703, CWE-754, or CWE-476 in a Python context, use this skill immediately.

2026-04-09
security-logging-alerting-failures
Analistas de segurança da informação

Use this skill whenever auditing, reviewing, or testing Python web applications (FastAPI or Flask) for OWASP A09:2025 — Security Logging & Alerting Failures. Trigger this skill when the user mentions: logging security, audit trails, log injection, sensitive data in logs, alerting gaps, insufficient logging, SIEM integration, log monitoring, incident detection readiness, or any request to audit or fix logging/alerting in a Python backend. Also trigger when a user asks "are we logging the right things?", "how do I detect attacks?", or "what should we be alerting on?". Do NOT skip this skill just because the request sounds simple — log-related security issues are consistently underestimated and require systematic coverage across all five CWEs.

2026-04-09
authentication-failures
Analistas de segurança da informação

Use this skill whenever you need to audit, test, or fix Authentication Failures (OWASP A07:2025) in Python web applications — especially FastAPI and Flask. Triggers include: any mention of JWT security, session management, brute force protection, credential stuffing, password policy, MFA enforcement, login rate limiting, session fixation, token validation, or auth-related error messages. Also trigger for requests to "check authentication", "audit login flows", "test auth security", "find auth bugs", or any task involving CWEs: CWE-287, CWE-307, CWE-384, CWE-521, CWE-798, CWE-613. Use proactively whenever the user shares auth-related code (routes, middleware, decorators, token handlers) even if they haven't explicitly mentioned security testing.

2026-04-08
software-data-integrity-failures
Analistas de segurança da informação

Security testing skill for OWASP A08:2025 — Software or Data Integrity Failures in Python web applications (FastAPI and Flask). Use this skill whenever the user wants to audit, detect, test, or fix integrity vulnerabilities including: insecure deserialization (pickle, yaml, jsonpickle, dill), mass assignment flaws, untrusted CDN/module inclusion, unsigned updates, CI/CD pipeline integrity, or Subresource Integrity (SRI) checks. Trigger this skill for ANY task involving pickle/deserialization security, CWE-502, CWE-915, CWE-829, CWE-345, or CWE-494, even if the user doesn't explicitly mention OWASP A08.

2026-04-08
injection
Analistas de segurança da informação

Expert Python security testing skill for OWASP A05:2025 — Injection vulnerabilities in FastAPI and Flask applications. Use this skill whenever the user asks about: SQL injection, XSS, SSTI (Server-Side Template Injection), OS command injection, ORM injection, LLM prompt injection, input validation, parameterized queries, Jinja2 escaping, or any untrusted data reaching an interpreter (database, OS shell, template engine, or browser). Also trigger for security audits, pen testing, Bandit SAST scans, code review for injection flaws, or any request to "find injection bugs", "check for SQLi", "audit my Flask/FastAPI app", or "scan for command injection". This skill has the highest CVE count of all OWASP categories (62,445) — always apply it proactively when reviewing Python web application security.

2026-04-06
insecure-design
Analistas de segurança da informação

Detect, analyze, and remediate OWASP A06:2025 Insecure Design vulnerabilities in Python web applications (FastAPI and Flask). Use this skill whenever the user asks about architecture-level security flaws, threat modeling, rate limiting gaps, business logic vulnerabilities, insecure file uploads, race conditions, tenant isolation failures, or client-side enforcement of server-side security. Trigger even if the user doesn't say "Insecure Design" explicitly — common signals include: "missing rate limiting", "file upload security", "business logic flaw", "race condition", "multi-tenant isolation", "threat modeling", "STRIDE", "design review", or "can users abuse this flow". Also trigger for code reviews or audits where architecture-level security controls are being evaluated, not just implementation bugs.

2026-04-06
cryptographic-failures
Analistas de segurança da informação

Detect, audit, and remediate A04:2025 Cryptographic Failures in Python web applications (FastAPI and Flask). Use this skill whenever the user asks about crypto security, password hashing, JWT configuration, TLS/SSL verification, weak randomness, hardcoded secrets, or any code using hashlib, random, ssl, jwt, passlib, or cryptography modules. Also trigger when the user wants to audit security, scan for OWASP A04 issues, fix crypto bugs, or review authentication-related cryptographic code. If there's any chance a crypto weakness is involved — trigger this skill.

2026-04-06
broken-access-control
Analistas de segurança da informação

Security testing skill for A01:2025 Broken Access Control — the #1 OWASP risk for two consecutive cycles. Use this skill whenever the user asks about: access control vulnerabilities, IDOR (insecure direct object references), authorization bugs, SSRF testing, CORS misconfiguration, privilege escalation, JWT/session manipulation, CSRF protection, or auditing FastAPI/Flask endpoints for missing auth guards. Also trigger when the user says "test my API for access control", "check authorization", "find IDOR bugs", "review permissions", "audit my routes", or mentions CWE-284, CWE-285, CWE-352, CWE-639, CWE-862, or CWE-918.

2026-04-05
Mostrando as 8 principais de 10 skills coletadas neste repositório.
Mostrando 5 de 5 repositórios
Todos os repositórios foram exibidos