api-security-best-practicesImplement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
auth-implementation-patternsImplement or review authentication and authorization with explicit token, session and resource-access boundaries.
backend-security-coderExpert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
cc-skill-security-reviewThis skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.
frontend-security-coderExpert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.
pci-complianceReview payment data flows and engineering control evidence for a scoped PCI assessment, without claiming certification.
sast-configurationStatic Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.
secrets-managementSecure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.