认证鉴权
认证与授权
create-skill
t-benze
Verified-agent custom-skill authoring from an active task session. Creates a standard_operational custom skill with server-verified task/session/agent/org provenance. The B2 record is created immediately and hidden by default until founder-configured eligibility makes it visible.
living-docs-governance
SeuPut0705
"Keep a long-lived project's documentation from rotting by assigning existing project docs clear constitution, map, status, and history roles, then wiring the active agent harness to those canonical sources. Use in the maintain phase when docs drift from code, agents lose context between sessions, or intentional removals keep being recreated. Prefer adopting the repository's current docs structure over creating new root files. 中文触发：文档治理、活文档、项目状态追踪、防文档漂移、项目地图、健康仪表盘、删除区、长期项目治理"
backend-patterns
SeuPut0705
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes. Use when building or reviewing Node.js, Express, or Next.js API routes and their data access.
thread
t-benze
Use this skill when the orchestrator invokes you for thread participation. Decide whether to reply, decline, or dispatch a task — all based on the thread context provided in your prompt.
django-security
SeuPut0705
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations. Use when reviewing Django authentication, authorization, input handling, or deployment settings.
openai-anthropic-taste-test
Azure-Samples
End-to-end assistant skill for the OpenAI + Anthropic Taste Test on Microsoft Foundry. Provisions GPT and Claude with azd, chooses Azure or local hosting based on RBAC access, runs the .NET Blazor app, verifies both model lanes, diagnoses Marketplace/quota/auth failures, and tears down resources. USE FOR: set up the taste test, deploy the taste test, try GPT versus Claude, azd up, run locally, roleAssignments/write workaround, Marketplace failures, quota errors, model 401/403, demo preparation, and cleanup. DO NOT USE FOR: unrelated Foundry agents, fine-tuning, or general Azure architecture work.
fix-gatehouse-mcp-auth
toxicwind
Fix MCP gatehouse authentication by setting require_mcp_auth to false in config file
cro-funnel
dirnbauer
Full-funnel Conversion Rate Optimization (CRO) for SaaS and web apps. Covers page CRO, form optimization, signup flow, onboarding activation, popup/modal design, and paywall/upgrade screens. Use when optimizing any part of the conversion funnel.
security-audit
dirnbauer
Security audit patterns for PHP/OWASP. Use when conducting security assessments, identifying vulnerabilities (XXE, SQL injection, XSS), or CVSS scoring.
create-python-x402-client
algorand-devrel
Create x402 HTTP clients with httpx (async) or requests (sync) that automatically handle 402 payments on Algorand. Use when building Python HTTP clients that pay for API access, setting up automatic 402 payment handling, implementing ClientAvmSigner for payment signing, or choosing between httpx and requests for x402. Strong triggers include "create a Python x402 client", "httpx with x402 payments", "requests with x402 Algorand", "automatic 402 payment handling in Python", "wrapHttpxWithPayment", "wrapRequestsWithPayment", "x402HttpxClient setup", "x402_requests setup", "how do I pay for API access with Algorand in Python?", "ClientAvmSigner implementation".
appsec-expert
martinholovsky
"Elite Application Security engineer specializing in secure SDLC, OWASP Top 10 2025, SAST/DAST/SCA integration, threat modeling (STRIDE), and vulnerability remediation. Expert in security testing, cryptography, authentication patterns, and DevSecOps automation. Use when securing applications, implementing security controls, or conducting security assessments."
api-expert
martinholovsky
"Expert API architect specializing in RESTful API design, GraphQL, gRPC, and API security. Deep expertise in OpenAPI 3.1, authentication patterns (OAuth2, JWT), rate limiting, pagination, and OWASP API Security Top 10. Use when designing scalable APIs, implementing API gateways, or securing API endpoints."
fastapi-expert
martinholovsky
"Expert FastAPI developer specializing in production-ready async REST APIs with Pydantic v2, SQLAlchemy 2.0, OAuth2/JWT authentication, and comprehensive security. Deep expertise in dependency injection, background tasks, async database operations, input validation, and OWASP security best practices. Use when building high-performance Python web APIs, implementing authentication systems, or securing API endpoints."
fastapi
martinholovsky
REST API and WebSocket development with FastAPI emphasizing security, performance, and async patterns
kanidm-expert
martinholovsky
"Expert in Kanidm modern identity management system specializing in user/group management, OAuth2/OIDC, LDAP, RADIUS, SSH key management, WebAuthn, and MFA. Deep expertise in secure authentication flows, credential policies, access control, and platform integrations. Use when implementing identity management, SSO, authentication systems, or securing access to infrastructure."
dbus
martinholovsky
"Expert in D-Bus IPC (Inter-Process Communication) on Linux systems. Specializes in secure service communication, method calls, signal handling, and system integration. HIGH-RISK skill due to system service access and privileged operations."
browser-automation
martinholovsky
"Expert in browser automation using Chrome DevTools Protocol (CDP) and WebDriver. Specializes in secure web automation, testing, and scraping with proper credential handling, domain restrictions, and audit logging. HIGH-RISK skill due to web access and data handling."
auth-security-validator
hirefrank
Autonomous validation of authentication security. Checks password hashing, cookie configuration, CSRF protection, and session management for OWASP compliance.
cursor-ai
G1Joshi
Cursor AI editor with context-aware coding. Use for AI-assisted development.
research
thoreinstein
Research the codebase to find and explain specific topics, answering questions about architecture, configuration, data flows, and implementation details
api-designer
icartsh
"OpenAPI/Swagger 사양, 인증 패턴, 버전 관리 전략 및 모범 사례를 사용하여 RESTful 및 GraphQL API를 설계하고 문서화합니다. 사용 사례: (1) API 사양 생성, (2) REST 엔드포인트 설계, (3) GraphQL 스키마 설계, (4) API 인증 및 권한 부여, (5) API 버전 관리 전략, (6) 문서 생성"
tdd-workflow
AnthemFlynn
Test-Driven Development workflow with session integration. Use when implementing features/bugfixes to enforce RED-GREEN-REFACTOR discipline. Integrates with session-management for enhanced TDD session tracking, checkpoints, and metrics.
auth-implementation-patterns
ovachiever
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
wicked-garden-engineering-backend
mikeparcewski
Backend engineering specialist for APIs, databases, server-side patterns, data modeling, scalability, and integrations. Use when: "design an API", "database schema", "how to handle auth", "backend performance", "REST endpoint", "query optimization", "server-side architecture"