form-captcha
form-captcha
【开发与工程】Use when reviewing public HTML forms (no authentication required to reach them) for bot and abuse protection mechanisms.
一个技能,一个新的可能。找到适合你的 AI 工作流。
form-captcha
【开发与工程】Use when reviewing public HTML forms (no authentication required to reach them) for bot and abuse protection mechanisms.
x-frame-options
【开发与工程】Use when reviewing HTTP response headers for clickjacking protection on any web application with authenticated user actions.
ai-coding-agent-guardrails
【开发与工程】Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team environments.
antigravity-maintainer-batch-release
【开发与工程】Run protected AAS maintainer sweeps, PR merge batches, canonical sync, Core preview checks, and scripted releases. Use for repository maintenance, main alignment, CLI/MCP/Workbench changes, or release work; not ordinary contribution tasks.
api-security-best-practices
【设计与创意】Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
api-security-best-practices
【设计与创意】Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
backup-recovery
【设计与创意】Implement backup and recovery strategies. Configure rsync, Restic, and cloud backups. Use when designing data protection solutions.
cloudflare-zero-trust
【部署与运维】Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.
cross-chain-relayer-audit
【效率与协作】Cross-chain relayer bridge audit register: message hash verifications, replay protection nonces, validator quorum, and withdrawal proofs.
gdpr-compliance
【设计与创意】Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.
hipaa-compliance
【数据与研究】Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
muapi-media
【效率与协作】Generate images and videos with MuAPI's schema-driven asynchronous media API while protecting keys, polling, and output downloads.
multi-tenant-llm-hosting
【设计与创意】Design secure, multi-tenant LLM hosting platforms with tenant isolation, quotas, billing attribution, noisy-neighbor protection, and per-tenant policy controls.
postgres-readonly-queries
【数据与研究】Execute safe read-only SQL queries against PostgreSQL databases with multi-connection support and defense-in-depth write protection.
privacy-by-design
【设计与创意】Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
privacy-by-design
【设计与创意】Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
protect-mcp-governance
【开发与工程】Agent governance skill for MCP tool calls — Cedar policy authoring, shadow-to-enforce rollout, and Ed25519 receipt verification.
waf-setup
【部署与运维】Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.