unit-test-security-authorization

aws-sdk-java-v2-core

giuseppe-trisciuoglio

Core patterns and best practices for AWS SDK for Java 2.x. Use when configuring AWS service clients, setting up authentication, managing credentials, configuring timeouts, HTTP clients, or following AWS SDK best practices.

aws-sdk-java-v2-kms

giuseppe-trisciuoglio

AWS Key Management Service (KMS) patterns using AWS SDK for Java 2.x. Use when creating/managing encryption keys, encrypting/decrypting data, generating data keys, digital signing, key rotation, or integrating encryption into Spring Boot applications.

spring-boot-rest-api-standards

giuseppe-trisciuoglio

REST API design standards and best practices for Spring Boot projects. Use this skill when creating or reviewing REST endpoints, DTOs, error handling, pagination, security headers, HATEOAS and architecture patterns.

spring-boot-openapi-documentation

giuseppe-trisciuoglio

Expert in documenting Spring Boot REST APIs using SpringDoc OpenAPI 3.0 and Swagger UI. Use when generating API documentation, configuring Swagger UI, adding OpenAPI annotations, implementing API security documentation, or enhancing REST endpoint documentation with examples and schemas.

compliance-checker

CuriousLearner

Check code against security compliance standards and best practices.

code-reviewer

CuriousLearner

Automated code review with best practices, security checks, and quality standards.

code-reviewer

masanao-ohba

Reviews PHP/CakePHP code for quality, standards compliance, and best practices

secure-coding

baz-scm

Incorporating security at every step of software development – writing code that defends against vulnerabilities and protects user data.

accessibility-testing

proffesor-for-testing

WCAG 2.2 compliance testing, screen reader validation, and inclusive design verification. Use when ensuring legal compliance (ADA, Section 508), testing for disabilities, or building accessible applications for 1 billion disabled users globally.

Security Auditing

jeanluciano

Audit security with vulnerability scanning, input validation checks, and auth/authz review against OWASP Top 10. Use when implementing authentication, reviewing security-sensitive code, or conducting security audits.

optimization-phase

marcusgoll

Standard Operating Procedure for /optimize phase. Covers performance benchmarking, accessibility audit, security review, and code quality checks.

Quality Standards

bejranonda

Defines code quality benchmarks, standards compliance, and best practices for maintaining high-quality codebases