Back to Skills

Security Specialist

majiayu000
Updated Today
1 views
58
9
58
View on GitHub
Othergeneral

About

The Security Specialist skill helps developers integrate security best practices and compliance checks directly into their workflow. It provides guidance on authentication, authorization, threat modeling, and regulations like GDPR. Use it when designing login systems, reviewing new features for risks, or ensuring data handling meets privacy standards.

Quick Install

Claude Code

Recommended
Plugin CommandRecommended
/plugin add https://github.com/majiayu000/claude-skill-registry
Git CloneAlternative
git clone https://github.com/majiayu000/claude-skill-registry.git ~/.claude/skills/Security Specialist

Copy and paste this command in Claude Code to install this skill

Documentation

Security Specialist Skills

🤖 智能体与 MCP 增强 (Agent & MCP Enhancements)

本 Skill 支持并推荐配合特定的智能体角色和 MCP 工具使用,以获得最佳效果。

推荐智能体角色

  • Security Auditor: 详见 AGENTS.md
    • 该角色具备“零信任”和“攻击者视角”,能够主动发现潜在风险。
    • 启用后,AI 将强制执行 OWASP 安全检查清单。

推荐 MCP 工具

  • Git MCP: 用于扫描历史提交中的敏感信息泄露。
  • Filesystem MCP: 用于检查文件权限和 .gitignore 配置。

提供全方位的安全保障,确保应用符合安全标准与法规。

包含的技能模块

1. 安全需求提取 (Security Requirements)

  • 核心价值: 在设计阶段识别安全风险。
  • 关键技术: 威胁建模, STRIDE 分析, 安全用户故事.
  • 使用场景: 新功能安全评审、架构设计。

2. 认证实现模式 (Authentication)

  • 核心价值: 实现安全可靠的用户身份验证。
  • 关键技术: JWT, OAuth2, OIDC, Session 管理.
  • 使用场景: 登录注册系统开发、第三方登录集成。

3. GDPR 数据处理 (GDPR Compliance)

  • 核心价值: 确保数据处理符合 GDPR 等隐私法规。
  • 关键技术: 数据最小化, 被遗忘权实现, 数据加密.
  • 使用场景: 出海应用开发、隐私合规审计。

如何使用

  • 登录设计: "请参考认证实现模式,帮我设计一个安全的 JWT 登录流程。"
  • 合规检查: "请检查我的数据库字段设计是否符合 GDPR 要求。"

GitHub Repository

majiayu000/claude-skill-registry
Path: skills/data/07_Security_Specialist

Related Skills

algorithmic-art

Meta

This Claude Skill creates original algorithmic art using p5.js with seeded randomness and interactive parameters. It generates .md files for algorithmic philosophies, plus .html and .js files for interactive generative art implementations. Use it when developers need to create flow fields, particle systems, or other computational art while avoiding copyright issues.

View skill

subagent-driven-development

Development

This skill executes implementation plans by dispatching a fresh subagent for each independent task, with code review between tasks. It enables fast iteration while maintaining quality gates through this review process. Use it when working on mostly independent tasks within the same session to ensure continuous progress with built-in quality checks.

View skill

executing-plans

Design

Use the executing-plans skill when you have a complete implementation plan to execute in controlled batches with review checkpoints. It loads and critically reviews the plan, then executes tasks in small batches (default 3 tasks) while reporting progress between each batch for architect review. This ensures systematic implementation with built-in quality control checkpoints.

View skill

cost-optimization

Other

This Claude Skill helps developers optimize cloud costs through resource rightsizing, tagging strategies, and spending analysis. It provides a framework for reducing cloud expenses and implementing cost governance across AWS, Azure, and GCP. Use it when you need to analyze infrastructure costs, right-size resources, or meet budget constraints.

View skill