菜单
Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardening code, or discussing vulnerabilities.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Docker & Hadolint validation (2026). Use when working with Docker, containers, or validating Dockerfiles.
Third-party Claude Code token/context/code-review tools. Use when choosing or recommending an external tool to reduce token usage, manage context, or review large codebases (caveman, code-review-graph, token-savior, context-mode...).
Third-party Claude Code token/context/code-review tools. Use when choosing or recommending an external tool to reduce token usage, manage context, or review large codebases.
Testing Flutter 3.44 / BLoC v9 / Riverpod 3 - Stratégie Complète. Use when writing tests, reviewing test coverage, or setting up testing.
Testing React Native 0.85+. Use when writing tests, reviewing test coverage, or setting up testing.
Stratégie de Tests Symfony 8.1 / PHP 8.5. Use when writing tests, reviewing test coverage, or setting up testing.
| name | security |
| description | Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardening code, or discussing vulnerabilities. |
| triggers | {"files":["**/auth/**","**/identity/**","**/security/**","**/middleware/**","*.security.*","*Auth*.*","*Security*.*"],"keywords":["security","auth","authentication","authorization","OWASP","injection","XSS","CSRF","JWT","password","vulnerability","encryption","hashing","bcrypt","token","session","RBAC","permissions","CORS","HSTS","CSP","SQL injection","SSRF","rate limit"]} |
| auto_suggest | true |
This skill provides universal security guidelines and OWASP Top 10 best practices applicable to any technology stack.
See @REFERENCE.md for detailed documentation.
