form-captcha
form-captcha
【开发与工程】Use when reviewing public HTML forms (no authentication required to reach them) for bot and abuse protection mechanisms.
THE SKILLS DIRECTORY
探索全部技能.
一个技能，一个新的可能。找到适合你的 AI 工作流。
x-frame-options
x-frame-options
【开发与工程】Use when reviewing HTTP response headers for clickjacking protection on any web application with authenticated user actions.
ai-coding-agent-guardrails
ai-coding-agent-guardrails
【开发与工程】Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team environments.
api-security-best-practices
api-security-best-practices
【设计与创意】Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
api-security-best-practices
api-security-best-practices
【设计与创意】Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
backup-recovery
backup-recovery
【设计与创意】Implement backup and recovery strategies. Configure rsync, Restic, and cloud backups. Use when designing data protection solutions.
cross-chain-relayer-audit
cross-chain-relayer-audit
【效率与协作】Cross-chain relayer bridge audit register: message hash verifications, replay protection nonces, validator quorum, and withdrawal proofs.
gdpr-compliance
gdpr-compliance
【设计与创意】Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.
hipaa-compliance
hipaa-compliance
【数据与研究】Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
multi-tenant-llm-hosting
multi-tenant-llm-hosting
【设计与创意】Design secure, multi-tenant LLM hosting platforms with tenant isolation, quotas, billing attribution, noisy-neighbor protection, and per-tenant policy controls.
postgres-readonly-queries
postgres-readonly-queries
【数据与研究】Execute safe read-only SQL queries against PostgreSQL databases with multi-connection support and defense-in-depth write protection.
privacy-by-design
privacy-by-design
【设计与创意】Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
privacy-by-design
privacy-by-design
【设计与创意】Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
waf-setup
waf-setup
【部署与运维】Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.
protected-vercel-deployments
protected-vercel-deployments
【部署与运维】Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection with agent-browser. Use when a preview or production URL redirects to a Vercel login page, returns a protection 401 or 403, or needs short-lived Trusted Sources OIDC authentication instead of a static bypass secret or public exception.
secret-scanning
secret-scanning
【开发与工程】Guide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation. For pre-commit secret scanning in AI coding agents via the GitHub MCP Server, this skill references the Advanced Security plugin (`advanced-security@copilot-plugins`). Use this skill when enabling secret scanning, setting up push…
officecli-word-form
officecli-word-form
【文档与办公】Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document', 'onboarding form', 'HR intake', 'surv…
gdpr-dsgvo-expert
gdpr-dsgvo-expert
【文档与办公】GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests with Art. 12(3) one-month deadlines. Use when running GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, or data subject rights (DSAR) management (e.g., 'check this serv…
18 / 934