Skill UI

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

Walks through Trail of Bits’ five-step secure smart-contract workflow, running Slither and special feature checks, generating visual diagrams, documenting security properties, and flagging manual risks with an action plan.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Automates security benchmark runner workflows by triggering on relevant terminology, guiding pen testing/compliance tasks, generating production-ready configs, and validating outputs against industry standards within advanced enterprise security scenarios.

Automates security policy creation within Security Advanced workflows by offering step-by-step guidance, best-practice templates, and validation of outputs for compliance, penetration testing, and threat modeling use cases.

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

Guide to automating Securitytrails workflows using Composio's toolkit via Rube MCP, covering tool discovery, connection validation, schema-compliant execution, and session handling.

Automates SIEM rule generation within advanced security workflows, guiding through industry best practices, compliance checks, and threat modeling to deliver production-ready configurations verified against common standards.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Provides a structured workflow for defining agent-agnostic subagents with isolated context, covering purpose definition, metadata configuration, prompt writing, and common specialist patterns for verification, debugging, security auditing, and review.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.