sast-idor
Automated detection of IDOR vulnerabilities using a three-phase subagent workflow to verify authorization and ownership checks on sensitive endpoints.
Discover reusable agent skills, browse implementation details, and find the right skill for your workflow.
149 skills found
Automated detection of IDOR vulnerabilities using a three-phase subagent workflow to verify authorization and ownership checks on sensitive endpoints.
React Native best practices for Expo and bare workflow. Supports project structure, navigation, NativeWind styling, platform-specific code, and TypeScript integration.
Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.
Comprehensive UI testing, visual fidelity analysis, and browser debugging using Chrome DevTools MCP and AI-driven vision models.
Generate professional Product Requirements Documents (PRD) and structure features for autonomous development cycles.
PyTorch Lightning skill for scalable deep learning: automates model training, multi-GPU orchestration, data pipelines, and distributed training strategies like DDP, FSDP, and DeepSpeed.
Generate or edit images using AI models like FLUX and Gemini. Ideal for photos, illustrations, concept art, and visual assets, excluding technical diagrams and schematics.
Perform comprehensive code reviews with a focus on security vulnerabilities, performance optimization, maintainability, and code correctness.
An autonomous UI implementation agent that converts Figma designs into pixel-perfect code using Figma MCP and browser-based refinement.
Systematic technical conversation logging for developers and engineers. Captures decisions, implementation details, and session outcomes with factual precision.
Generate and edit images, diagrams, and infographics using Google's Gemini 3 Pro model. Supports text-to-image, style transformation, and data-accurate visual creation.
Extract, deobfuscate, and port WebGL/Canvas/Shader visual effects from websites into standalone, native JavaScript projects.