aasb-aas-secure-app-builder

Plugin aasb-aas-secure-app-builder in ibrdot/swe-re-expert. Commands read from the repo's manifest — 19 days ago.

Skills (12)

• api-security-best-practices

  Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

• auth-implementation-patterns

  Implement or review authentication and authorization with explicit token, session and resource-access boundaries.

• backend-security-coder

  Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.

• cc-skill-security-review

  This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.

• dependency-management-deps-audit

  You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

• django-access-review

  Use when reviewing Django or DRF access control: trace authorization flows, IDOR risks, object permissions, query scoping and tenant isolation before proposing a verified fix.

• frontend-security-coder

  Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.

• pci-compliance

  Review payment data flows and engineering control evidence for a scoped PCI assessment, without claiming certification.

• sast-configuration

  Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.

• secrets-management

  Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

• security-requirement-extraction

  Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

• threat-modeling-expert

  Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.

Similar plugins