auth-implementation
Implement authentication and authorization safely: JWT, OAuth2, RBAC, or API key strategies.
60-security — Security
4 skills in this category.
dependency-scanning
Scan project dependencies for known CVEs and license compliance issues. Works with npm, pip, go mod, Maven, NuGet.
secure-coding-review
Review code for OWASP Top 10 vulnerabilities, common security anti- patterns, and language-specific pitfalls.
threat-modeling
Identify threats using STRIDE methodology, assess risk, and prioritize mitigations for a system or component.