Source

afu-it/security-for-vibecoders

17 skills · 129 combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
access-control-patterns Enterprise-grade access control patterns to prevent broken access control, IDOR, tenant data leaks, privilege escalat…
afu-it/security-for-vibecoders
66
2
auth-hardening Harden authentication systems against session fixation, brute-force attacks, and weak password storage. Covers bcrypt…
afu-it/security-for-vibecoders
6
3
security-headers Add security headers (CSP, HSTS, X-Frame-Options, Permissions-Policy) to prevent clickjacking, XSS, and data leaks. P…
afu-it/security-for-vibecoders
6
4
secrets-management Prevent hardcoded secrets in source code. Covers .env setup, .gitignore patterns, secret scanning, runtime secret inj…
afu-it/security-for-vibecoders
5
5
ci-security-gates Add CodeQL SAST, Gitleaks secret scanning, and dependency audit to any CI/CD pipeline. Blocks deployment if vulnerabi…
afu-it/security-for-vibecoders
4
6
error-handling-security Prevent information leakage through error messages. Covers sanitized error responses, structured error handling, no s…
afu-it/security-for-vibecoders
4
7
input-validation Validate and sanitize all user input to prevent XSS, path traversal, command injection, and malformed data. Covers Zo…
afu-it/security-for-vibecoders
4
8
pdpa-security-audit Full PDPA 2024 + OWASP Top 10 security audit for any codebase. Checks all 8 forensic findings from Malaysian court ca…
afu-it/security-for-vibecoders
4
9
rate-limiting Add per-user and per-IP rate limiting to API endpoints. Covers Cloudflare Workers (KV-based sliding window), Express.…
afu-it/security-for-vibecoders
4
10
sql-injection-prevention Detect and fix SQL injection vulnerabilities in any framework. Covers Laravel (DB::raw, whereRaw), Node.js (template …
afu-it/security-for-vibecoders
4
11
webhook-security Fix race conditions, add idempotency guards, and implement timing-safe token comparisons for payment webhooks. Covers…
afu-it/security-for-vibecoders
4
12
audit-logging-workers Add structured audit logging with immutable R2 storage to Cloudflare Workers. Creates a typed audit utility, instrume…
afu-it/security-for-vibecoders
3
13
cors-configuration Configure CORS correctly to prevent credential leaks and unauthorized cross-origin access. Covers Express, Next.js, C…
afu-it/security-for-vibecoders
3
14
data-encryption Encrypt personal data at rest and in transit to comply with PDPA 2024. Covers field-level encryption for PII, AES-256…
afu-it/security-for-vibecoders
3
15
dependency-lockfile-audit Detect typosquatting, malicious packages, and lockfile tampering in npm, pip, and composer dependencies. Covers lockf…
afu-it/security-for-vibecoders
3
16
secure-ship Security for vibe coders. Full PDPA 2024 + OWASP Top 10 compliance for any codebase. Covers enterprise-grade access c…
afu-it/security-for-vibecoders
3
17
ssrf-prevention Enterprise-grade Server-Side Request Forgery (SSRF) prevention for APIs, webhooks, URL previewers, importers, and fet…
afu-it/security-for-vibecoders
3