OWASP API Security Top 10 (2023) and Web Top 10 (2025) with production Next.js App Router code: access control, authentication with MFA and password reset, input validation, rate limiting, security headers and CSRF, data exposure, supply chain, SSRF, file uploads, and AI tools on those APIs
Plugin api-security from marketplace leahycc-skills in LeahyCC/claude-skills. Commands read from the repo's manifest — 13 days ago.
api-securityOWASP API Security Top 10 (2023) with production Next.js App Router code. Access control, authentication with MFA and password reset, input validation (SQL, NoSQL and command injection), rate limiting and per-account login throttling, security headers and CSRF, data exposure, supply chain and startu
Everything drawn with text characters, for work or fun: diagrams, tables, bar charts, sparklines, banners, boxes, pictures, pixel sprites, kaomoji, game boards and mazes. Draws on a grid, hands the counting to 5 Node scripts, and checks alignment before showing.
1 skill
Code a cold reader can follow: no floating (magic) numbers or strings without a name or a unit-and-why note nearby, names that carry units and do not lie, small single-purpose functions, shallow nesting, honest comments, no dead code, and balanced ESLint tuning.
1 skill
Silent bugs that pass typecheck and happy-path tests: 200 HTML fallbacks, pre-await state commits, swallowed catches, module singletons, Web API footguns, fresh-clone gaps, and false-green tests.
1 skill
OWASP LLM Top 10 (2026) and Agentic Top 10 (2026) when a model can see untrusted content or act with real credentials. Trust boundaries, tools, memory, MCP, supply chain, output handling, and human approval.
1 skill
Version-aware Next.js App Router guidance: component boundaries, data, caching, routing, proxy, errors, metadata, assets and migration. Scoped source review in skills/nextjs-app-router/SOURCES.md.
1 skill
Docs cut to what the reader needs: a fixed 5 layer page shape (why, picture, substance, edges, detail on demand), a cut ladder for sections, and the AI sound tells to fix. Write new docs or trim existing ones.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Claude API and SDK documentation skill for building LLM-powered applications
19 skills
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Skill: add headroom-ai compress() to a Python or TypeScript app to cut LLM input tokens (tool outputs, logs, JSON, chat history). No API key.
1 skill
Backend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development
9 skills · 1 command · 8 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.