Download

Skill UI

Browse and discover 11118+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Vulnerabilities , found 228 results

Default Newest Most Downloaded

Secure Supabase Development Best Practices

sickn33/antigravity-awesome-skills

A comprehensive guide for developers working with Supabase. Covers best practices for database interaction, robust authorization using Row Level Security (RLS), secure authentication (Auth), and integrating various Supabase products (Storage, Realtime, Edge Functions). Essential for preventing common security vulnerabilities like BOLA/IDOR and ensuring data integrity across your application stack.

Browser Authentication Flow Adversarial Probing

browser-auth-flow

This tool drives and audits a website's authentication flow by executing a configurable set of adversarial probes. It checks for critical security vulnerabilities such as missing CSRF tokens, insecure session cookies, dangerous redirect leaks, and OAuth misconfigurations. It generates a structured findings report for pre-deployment security auditing.

DeFi AMM Smart Contract Security Audit

defi-amm-security

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

Check Project Dependencies For Vulnerabilities

dependency-check

This tool scans project dependencies to detect known Common Vulnerabilities and Exposures (CVEs) and outdated packages. It is essential for security auditing of third-party packages, mandatory before major releases, or immediately after dependency updates. It helps teams assess risk levels (critical, high, moderate) and can even attempt automatic fixes via the CLI.

Django Security Best Practices Guide

django-security

A comprehensive guide covering essential security best practices for Django applications. It details how to implement robust authentication, granular authorization (RBAC), and crucial security settings like CSRF/XSS protection, HSTS, and secure environment configuration to prevent common vulnerabilities in production deployments.

Django Full-Cycle Deployment Readiness Check

django-verification

This script provides a comprehensive, multi-stage verification loop for Django applications. It ensures deployment readiness by checking environment configuration, enforcing code quality (type hinting, formatting), running extensive unit and integration tests with coverage reports, and performing deep security scans for vulnerabilities and hardcoded secrets. Essential for CI/CD pipelines before merging or releasing.

Cost Audit for Development Tools

ecc-tools-cost-audit

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

Secure Laravel Applications Best Practices

laravel-security

A comprehensive guide detailing best practices for securing Laravel applications. Covers critical areas including robust authentication and authorization (Policies, Sanctum), input validation (Form Requests), mitigating common vulnerabilities like XSS, CSRF, and SQL injection, and implementing secure deployment configurations.

Perl Secure Coding and Security Patterns

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

Quarkus Application Security Best Practices

quarkus-security

This comprehensive guide covers security best practices for building robust Quarkus applications. It details how to implement secure authentication (JWT, OIDC), role-based authorization (RBAC), robust input validation (Bean Validation), and advanced protection against vulnerabilities like SQL injection and CSRF. Essential for securing resource access and managing application secrets.

Security Vulnerability Bounty Hunting

security-bounty-hunter

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

Agent Code Security Auditor

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.

Prev 1 2 3...16 17 1819

Language