Agent skill · security · aiskillstore
security-sentinel
Use when working with authentication, API routes, user input, or sensitive data. Audits code for security vulnerabilities based on OWASP Top 10. Critical for payment processing, auth systems, and data handling.
Why this skill is useful
Includes comprehensive security references and patterns that provide deep specialized knowledge for securing applications against vulnerabilities.
What it needs
About 9k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Sentinel (World-Class Security Skill) When to Use ALWAYS use this skill when: Writing/reviewing API routes (especially POST/PATCH/PUT/DELETE) Implementing authentication or authorization Handling user input (forms, query params, file uploads) Working with database queries Processing file operations Managing environment variables and secrets Building payment processing features Implementing session management Handling sensitive data or encryption Before creating pull requests Before deployment Comprehensive Documentation This skill includes complete security references: 📚 Core References (10,426 lines total) 1. owasp-top-10-complete.md (2,133 lines) - Complete OWASP Top 10 with code examples A01: Broken Access Control (IDOR, path traversal) A02: Cryptographic Failures (weak hashing, hardcoded secrets) A03: Injection (SQL, NoSQL, Command injection) A04: Insecure Design (race conditions, rate limiting) A05: Security Misconfiguration (CORS, error messages) A06: Vulnerable Components (dependency management) A07: Authentication Failures (weak passwords, MFA) A08: Integrity Failures (supply chain, deserialization) A09: Logging Failures (audit trails, monitoring) A10: SSRF (URL validation, IP blocking) 2. authentication-patterns.md (1,529 lines) - Complete authentication guide JWT token authentication Session-based authentication Password hashing (bcrypt, Argon2) Password reset flow Email verification Multi-factor authentication (TOTP) OAuth 2.0 (GitHub, Google) Passwordless authentication (magic links) Refresh token pattern 3. authorization-patterns.md (1,062 lines) - Access control implementation Role-Based Access Control (RBAC) Attribute-Based Access Control (ABAC) Middleware protection API route protection Server Action protection Row-level security (Drizzle patterns) Permission system Resource ownership validation 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-sentinel