figulazmi/Security Specialist
.claude/skills/security-specialist/SKILL.md
应用安全专家，专注于认证授权、数据保护和合规性审计。当用户需要：(1) 设计安全的登录认证系统 (2) 进行安全代码审查 (3) 检查 GDPR/隐私合规 (4) 防范常见安全漏洞 (OWASP Top 10) 时使用此 Skill。
testing
Updated Apr 17, 2026
$ install --global
skillsauthnpx skillsauth add figulazmi/token-monitor Security SpecialistInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 1:42 AM52.3s5 files scanned
SKILL.md
- name:
- Security Specialist
- description:
- 应用安全专家，专注于认证授权、数据保护和合规性审计。当用户需要：(1) 设计安全的登录认证系统 (2) 进行安全代码审查 (3) 检查 GDPR/隐私合规 (4) 防范常见安全漏洞 (OWASP Top 10) 时使用此 Skill。
Security Specialist Skills
🤖 智能体与 MCP 增强 (Agent & MCP Enhancements)
本 Skill 支持并推荐配合特定的智能体角色和 MCP 工具使用，以获得最佳效果。
推荐智能体角色
- Security Auditor: 详见 AGENTS.md。
- 该角色具备“零信任”和“攻击者视角”，能够主动发现潜在风险。
- 启用后，AI 将强制执行 OWASP 安全检查清单。
推荐 MCP 工具
- Git MCP: 用于扫描历史提交中的敏感信息泄露。
- Filesystem MCP: 用于检查文件权限和
.gitignore配置。
提供全方位的安全保障，确保应用符合安全标准与法规。
包含的技能模块
1. 安全需求提取 (Security Requirements)
- 核心价值: 在设计阶段识别安全风险。
- 关键技术: 威胁建模, STRIDE 分析, 安全用户故事.
- 使用场景: 新功能安全评审、架构设计。
2. 认证实现模式 (Authentication)
- 核心价值: 实现安全可靠的用户身份验证。
- 关键技术: JWT, OAuth2, OIDC, Session 管理.
- 使用场景: 登录注册系统开发、第三方登录集成。
3. GDPR 数据处理 (GDPR Compliance)
- 核心价值: 确保数据处理符合 GDPR 等隐私法规。
- 关键技术: 数据最小化, 被遗忘权实现, 数据加密.
- 使用场景: 出海应用开发、隐私合规审计。
如何使用
- 登录设计: "请参考认证实现模式，帮我设计一个安全的 JWT 登录流程。"
- 合规检查: "请检查我的数据库字段设计是否符合 GDPR 要求。"
Related Skills
figulazmi/web-security-testing
development
VerifiedTrustedCommunity
Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.
SKILL.mdUpdated Apr 17, 2026
figulazmi/web-artifacts-builder
development
VerifiedTrustedCommunity
To build powerful frontend claude.ai artifacts, follow these steps:
SKILL.mdUpdated Apr 17, 2026
figulazmi/skill-creator
tools
VerifiedTrustedCommunity
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
SKILL.mdUpdated Apr 17, 2026
figulazmi/rag-knowledge-capture-cli
tools
VerifiedTrustedCommunity
Generate RAG-optimized knowledge chunks from a Claude Code CLI session (VS Code). Integrated with CLAUDE.md Session End Protocol — auto-triggered before /clear. Produces chunked Markdown files with Qdrant-ready frontmatter metadata. Qdrant collection: "knowledge". Chunk strategy: split per problem-solution pair. Output language: English only (optimized for embedding quality). Saves to .claude/summaries/ and signals push-to-qdrant.sh. NEVER push to any API. ONLY output .md files.
SKILL.mdUpdated Apr 17, 2026