Claude Code Skills·Claude Skills·The open SKILL.md registry for Claude
ClaudSkills › Security › Web Security › Page 16

Web Security (Page 16 of 20)

1180 Claude Code skills in the Web Security sub-category of Security.

1,180 skills · updated 2026-10-25 · showing 901–960 of 1,180 by quality score

For the full experience including quality scoring and one-click install features for each skill — upgrade to Pro.

Reset the local SQLite DB to sample data and launch the API + Vite dev servers for manual verification.
Autonomously detect and fix broken dependencies, missing packages, Docker issues, Playwright, WhatsApp auth, TypeScript build failures, and SQLite corruption.
Guidelines for developing with Sequelize, a promise-based Node.js ORM supporting PostgreSQL, MySQL, MariaDB, SQLite, and SQL Server
Servd (servd.host) — Craft-specialised managed hosting for Craft CMS. Covers git push-to-deploy with the optional servd.yaml build config, local → staging → production…
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
OWASP Serverless Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in serverless application environments.
Index Claude Code session JSONL logs into a SQLite + FTS5 database with Japanese-aware tokenization, and search them
Secrets management, XSS prevention, CSRF protection, dependency scanning, DOMPurify sanitization, CSP headers, CODEOWNERS, HttpOnly cookies
Use when handling security-sensitive code: credentials, IAM policy, encryption, PII (autori/artisti), copyright codes (ISWC/ISRC). Applies OWASP Top 10 + AWS security policy SIAE.
Review untrusted input and dynamic execution boundaries including shell commands, PowerShell/cmd, plugins, code loading, archive extraction, deserialization, tool invocation,…
Security best practices for Sinatra applications including input validation, CSRF protection, and authentication patterns.
Use when performing zero-execution static AST security vetting of third-party agent skills, enforcing OWASP AST01-AST10 and blocking the lethal trifecta.
Skrift form system — Pydantic-backed forms with CSRF protection, template rendering, and hook integration.
Query and manipulate slackdump SQLite archives. Use when searching Slack messages, filtering by date/privacy, generating statistics, or creating smaller database subsets.
Copy the legacy bun:sqlite smithers.db into PGlite or Postgres and write the migrated.json marker. Run `smithers migrate --help` for usage details.
Project CodeGuard-based secure-by-default coding rules (23 rule files spanning injection, authentication/MFA, cryptography, secrets, authorization, sessions, cloud/Kubernetes,…
Run an automated solo D&D 5e (2014 rules) game with Claude as the Dungeon Master. Grounded adjudication (real dice, real DCs committed to disk before rolls), independent NPC…
State-of-the-art PHP engineering (2026 baseline, PHP 8.3+ floor, 8.5 current) for both writing new PHP and auditing existing PHP code.
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code,…
Hardens API endpoints against common attacks. Covers rate limiting, input validation, auth, CORS, headers, injection prevention, error handling, and monitoring.
Use for secure application, database, server, credential, TLS, CSRF, password, or access-control configuration and review.
Проводит глубокий QA-аудит спецификации на основе стандартов ISTQB, BABOK и OWASP. Выявляет не только архитектурные дыры, но и логические противоречия между Требованиями, Схемой…
Security Auditor - Audit AppSec theo OWASP, secret scanning, dependency/vuln, threat modeling.
Use when you have one or more MS/MS query spectra (in mzML, mgf, msp, mzxml, json, or pickled matchms format) and a pre-built spectral library stored in SQLite with precomputed…
Sport- und Fitness-Tracking mit P90X, Fahrrad, Wandern, Laufen. SQLite-basiert mit automatischem Komoot-Import, Berichten (Woche, Monat), Emoji-Visualisierung, Kalorien-Berechnung…
Spring Security 7 implementation for Spring Boot 4. Use when configuring authentication, authorization, OAuth2/JWT resource servers, method security, or CORS/CSRF.
Migrates Spring Security 5 on Boot 2 to Spring Security 6 on Boot 3: drop WebSecurityConfigurerAdapter, switch to EnableMethodSecurity, requestMatchers, lambda DSL, and…
Use when reviewing or hardening authentication and authorization in a Spring Boot service that uses Spring Security, JWT, OAuth2, sessions, refresh tokens, or service-to-service…
Minimum Spring Security 7 configuration patterns and review baseline. Use when designing or reviewing authentication, authorization, CSRF, CORS, secrets handling, or input…
中文优先:用于Spring Boot安全相关任务,帮助识别、设计、实现或验证对应工作流。English keywords: Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency…
SQL standards — UUID v7 PKs, snake_case, soft delete, forward-only migrations, parameter binding, N+1 prevention, EXPLAIN-driven indexing.
Expert SQL query writing, optimization, and database schema design with support for PostgreSQL, MySQL, SQLite, and SQL Server.
SQL查询与数据库操作辅助引擎(免费版),支持MySQL、PostgreSQL、SQLite、SQLServer. 核心能力: - 自然语言转SQL查询(跨4种数据库方言) - 查询性能分析与索引优化建议 - 数据库Schema设计与ER图生成 - 复杂分析查询(窗口函数/CTE/递归查询)
Eliminate SQL injection by sending data as bound parameters instead of concatenated query text, and auditing every raw-SQL escape hatch.
Sql Injection Detector - Auto-activating skill for Security Fundamentals. Triggers on: sql injection detector, sql injection detector Part of the Security Fundamentals skill…
Prévenir les injections SQL. Utiliser quand on vérifie qu'une requête utilise db.all(sql, [params]) correctement.
Prevent SQL injection attacks using prepared statements, parameterized queries, and input validation. Use when building database-driven applications securely.
Detect SQL injection vulnerabilities in your codebase. Use when you need to find unsafe database queries before they get exploited.
Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input…
Translate natural language to SQL, optimize query performance, and interpret EXPLAIN plans for SQLite and PostgreSQL.
Review SQL queries, ORM-generated SQL and query plans for correctness and performance: injection, implicit casts, NULL logic, non-sargable predicates, missing indexes, N+1…
Deterministic SQL skill for SQLite and SQL Server planning/execution flows. Use when you need SK-callable SQL actions like connect, list tables, inspect schema, and run…
Query, design, migrate, and optimize SQL databases. Use when working with SQLite, PostgreSQL, or MySQL — schema design, writing queries, creating migrations, indexing,…
帮助用户编写和优化 SQL 查询,包括将自然语言转换为 SQL、提供查询优化建议以及解读 EXPLAIN 执行计划。当用户需要 SQL 相关帮助时触发,例如直接请求“自然语言转SQL”、“帮我优化这条SQL”、“解释一下这个执行计划”,或提及关键词如 NL2SQL、SQL优化、慢查询、索引建议、全表扫描、SQL调优,以及支持 SQLite 和…
Query SQL databases — SQLite, PostgreSQL, MySQL — run SELECTs and statements, list and describe tables, and pull results out as JSON, when a task needs to read or write a real…
Detect SQL injection where user input reaches SQL query construction through string concatenation, template literals, or ORM raw query methods.
SQLite - embedded database, SQL queries, schema design, Python integration, optimization
SQLite Analyst is built around SQLite embedded database. The underlying ecosystem is represented by WiseLibs/better-sqlite3 (7,041+ GitHub stars).
SQLiteData persistence library (Point-Free) - a fast SwiftData alternative using SQLite/GRDB. Use when working with SQLiteData, GRDB, type-safe SQL queries, @Table macro,…
Expert in SQLite embedded database development for Tauri/desktop applications with focus on SQL injection prevention, migrations, FTS search, and secure data handling
SQLite expert for WAL mode, query optimization, embedded patterns, and advanced features
Guide pour écrire des requêtes SQL et concevoir des schémas SQLite avec les bonnes pratiques. À utiliser quand l'utilisateur travaille avec SQLite, écrit des requêtes SQL — from…
Reads unknown SQLite and GeoPackage files via sqlite_master and PRAGMA, then emits batched JSON or GeoJSON under a read-only URI.
Extend Ordinus SQLite persistence conservatively. Use when touching better-sqlite3, Drizzle schema, database bootstrap, app_meta, migrations, durable state, persistence…
Personal note-taking, thinking trails, and knowledge management using plain SQLite. Supports capture-heavy workflows with clear provenance tracking, AI-generated thinking…
Patterns for SQLite databases in Python projects - state management, caching, and async operations. Triggers on: sqlite, sqlite3, aiosqlite, local database, database schema,…
Use when you have mass spectrometry data stored in a SQLite database indexed by spectrum ID and need to retrieve specific spectra by ID (random access via __getitem__) or iterate…
Liest SQLite-Datenbanken strikt read-only (kein Schreibrecht nötig), inspiziert Schema inkl. Foreign-Key-Discovery und generiert sichere SELECT-Wizards.
Design or review schemas for `crates/cloudsync` using SQLite Sync constraints, not generic SQLite advice.
Use when a val needs to store structured or relational data. Covers the std/sqlite API, parameterized queries, transactions, and the val-scoped vs organization-scoped database…
All Security skills →
More in SecurityRed Team (1,734) · Threat Hunting (876) · Identity Access (547) · Network Security (462) · Appsec Tools (423) · Forensics (342) · Compliance (239) · Malware Analysis (227) · Cloud Security (100) · Zero Trust (88) · Crypto Keymgmt (75) · Appsec Build (68) · Incident Response (21) · Ot Ics Security (11)