skills.rest
rohit-vc26
rohit-vc26COMMUNITY
Explore all skills by this author →
GitHub

cyber-security

Audit codebases for application-security vulnerabilities and password-storage practices.

1|Updated Apr 9, 2026
Search Tags:#input-validation#code-review#auth#security-audit#application-security#cyber-security#no-sql
One-click install
npx skills add https://github.com/rohit-vc26/claude-power-kit --skill cyber-security-rohit-vc26
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cyber-security
Source: https://github.com/rohit-vc26/claude-power-kit/tree/main/skills/cyber-security
Command: npx skills add https://github.com/rohit-vc26/claude-power-kit --skill cyber-security-rohit-vc26

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Application-security playbook that fuses two reference bodies into a practical, action-oriented checklist to help developers and security engineers audit and harden authentication, input validation, secrets handling, and frontend/environment concerns across codebases.

Core Features & Use Cases

  • Unified security audits that cover both Part A (vulnerabilities) and Part B (password storage) checks.
  • Guided code-review workflows targeting SSTI, ReDoS, long-password DoS, client-side secret leakage, NoSQL injection, clipboard hijack, login replay, and password-storage best practices.
  • PR-ready remediation guidance and guardrails to surface actionable fixes before merging.

Quick Start

Run the cyber-security skill on your codebase to start a targeted security audit and produce actionable findings.

Frequently Asked Questions about cyber-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for application-security vulnerabilities like NoSQL injection and SSTI?▼

Run a security audit on your codebase to identify vulnerabilities like SSTI, NoSQL injection, and ReDoS. The skill checks authentication flows, input validation, templating, and secrets handling to produce actionable findings.

What is the best way to prevent login replay and long-password DoS during a security audit?▼

The best way to prevent login replay and long-password DoS is using guided code-review workflows that target these specific vulnerabilities, providing PR-ready remediation guidance and guardrails before merging.

How does password storage best practice work with Argon2id and pepper guidance?▼

Password storage best practice with Argon2id and pepper guidance involves auditing your current password-storage implementation against secure hashing standards to ensure credentials remain protected against brute-force attacks.

Can I use this security audit for frontend checks like clipboard hijack detection?▼

Yes, you can use this security audit for frontend checks including clipboard hijack detection and client-side secret leakage, as it covers both Part A vulnerability checks and Part B password storage practices.

Does this application-security playbook cover input validation and ReDoS detection?▼

Yes, this application-security playbook covers input validation and ReDoS detection, applying a unified security audit that surfaces actionable fixes for regex denial-of-service and related input handling vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
thesimonhothesimonho
26

security-best-practices

Enforce security best practices in code reviews and CI/CD pipelines.

Community
Advanced
zhangzhang-111-izhangzhang-111-i
2

env-secrets-manager

Scan repositories for environment variable and secret leaks.

Community
Intermediate
PrirogativusPrirogativus

security-review

Identify and mitigate security vulnerabilities in codebases via static analysis.

Community
Advanced