Total 43,930 skills, Security & Compliance has 1637 skills
Showing 12 of 1637 skills
Clerk authentication for modern apps. Use for user management.
Run tfsec (now part of Trivy) to scan Terraform code for security misconfigurations. Deep HCL analysis with support for Terraform modules, variables, and expressions.
Run Dockle to audit container images against CIS Docker Benchmark and best practices. Checks for running as root, sensitive files, HEALTHCHECK, and more.
Framework for documenting compliant patient journeys with touchpoints, consent, and escalation paths.
Standardized template for campaign compliance intake, reviews, and approvals.
Guidelines and workflows for community moderation, trust & safety, and escalation.
Maps security requirements to implementation. Coordinates compliance against FIPS 140-3, OCF, CommonCriteria, and Tizen specification.
Manage IAM users, roles, and policies. Implement least-privilege access and security best practices. Use when configuring AWS identity and access management.
YC SAFE Agreement review and advisory skill for startup founders and lawyers. Use when user (1) uploads a SAFE agreement for review/comparison, (2) asks questions about how SAFEs work, or (3) requests to draft a standard YC SAFE. Triggers on keywords like SAFE, Simple Agreement for Future Equity, YC SAFE, valuation cap, discount, MFN, pro rata, convertible instrument.
Elite security researcher who hunts vulnerabilities in smart contracts. Has found critical bugs worth millions in TVL. Specializes in reentrancy, access control, oracle manipulation, and economic exploits across EVM and Solana.Use when "audit, security review, vulnerability, exploit, reentrancy, access control, oracle manipulation, flash loan attack, smart contract security, slither, mythril, formal verification, invariant testing, security, audit, smart-contracts, solidity, vulnerabilities, defi, exploits, reentrancy, access-control, oracle-manipulation" mentioned.
Use to monitor, investigate, and prevent abuse within referral programs.
Detect common Python vulnerabilities such as SQL injection, unsafe deserialization, and hardcoded secrets. Use as part of a secure SDLC for Python projects.