auth-implementation
When you need auth that won't become a breach headline — implements JWT, OAuth2, or RBAC safely.
60-security — Security
4 skills in this category.
dependency-scanning
When your supply chain is only as strong as its weakest dep — checks for CVEs and license compliance.
secure-coding-review
When code needs a security audit before shipping — scans for OWASP Top 10 vulnerabilities and anti-patterns.
threat-modeling
Before attackers find the holes — identifies STRIDE threats, assesses risk, plans mitigations.