redhatproductsecurity/prodsec-skills

145 skills315 total installsGithubGithubGitHub

database-security

7

mqtt-security

4

aws-security

4

authorization

3

xml-serialization-security

3

model-registry-secure-storage

3

third-party-model-security

3

authentication-enforcement

3

agentic-actions-auditor

3

kafka-amq-security

3

model-security-scanning

3

libafl

3

coverage-analysis

3

sharp-edges

3

zeroize-audit

3

vector-forge

3

authentication

3

defense-in-depth

3

oidc-integration

3

request-validation

2

secdevai-oci-image-security

2

observability

2

rate-limiting

2

software-signing

2

file-protection

2

secure-pipeline

2

os-tool-security

2

sbom-provenance

2

libfuzzer

2

secure-by-design

2

go-security

2

network-acls

2

containerization

2

avoid-api-keys

2

git-cleanup

2

hardening-local

2

agent-identity

2

variant-analysis

2

roots-support

2

scc-security

2

harness-writing

2

sarif-parsing

2

secure-storage

2

modern-python

2

secdevai-review

2

ai-code-review

2

tls-compliance

2

token-lifecycle

2

cpu-performance

2

network-security

2

safe-c-functions

2

react-security

2

graphql-security

2

hardening-remote

2

fips-compliance

2

secdevai-fix

2

health-probes

2

reject-api-keys

2

workload-resilience

2

vulnerability-management

2

jwt-token-enforcement

2

runtime-restrictions

2

admin-interface-security

2

devcontainer-setup

2

service-to-service-mtls

2

bidirectional-filtering

2

simplicity-and-isolation

2

encrypted-communication

2

audit-context-building

2

mermaid-to-proverif

2

client-side-security

2

fuzzing-dictionary

2

rbac

2

differential-review

2

wycheproof

2

property-based-testing

2

linux-capabilities

2

discovery-mechanism

2

algorithm-selection

2

helm-chart-security

2

web-application-security

2

crypto-protocol-diagram

2

oauth21-resource-server

2

operator-security

2

agent-to-mcp-server-auth

2

ai-systems-security

2

oauth-scopes-handling

2

oauth21-implementation

2

container-hardening

2

insecure-defaults

2

secure-token-handling

2

discovery-mechanisms

2

constant-time-testing

2

semgrep-rule-creator

2

ossfuzz

2

http-security-headers

2

codeql

2

isolation-sandboxing

2

semgrep

2

apache-camel-security

2

fp-check

2

platform-integrity

2

client-metadata-support

2

no-credential-forwarding

2

constant-time-analysis

2

agent-to-agent-auth

2

external-idp-integration

2

consent-and-scoping

2

fuzzing-obstacles

2

model-registry-logging

2

compiler-hardening

2

file-handling-uploads

2

pod-access-control

2

sampling-controls

2

address-sanitizer

2

token-exchange-for-tools

2

mcp-client-dynamic-client-registration

2

output-validation-sandbox

2

session-management-cookies

2

least-privilege-and-mediation

2

dynamic-client-registration

2

semgrep-rule-variant-creator

2

redis-elasticache-security

2

prompt-injection-mitigation

2

model-registry-model-security-scanning

2

mcp-client-protected-resource-metadata

2

build-yaml-misconfiguration

2

atheris

2

input-validation-injection

2

supply-chain-risk-auditor

2

protected-resource-metadata

2

dependency-vulnerability-audit

2

logging

2

ruzzy

2

aflpp

2

tool-server-injection-prevention

2

internal-application-routing

2

secrets-detection-patterns

2

logging-and-observability

2

model-registry-model-signature-verification

2

model-signature-verification

2

mcp-client-client-metadata-support

2

transparency-and-usability

2

input-output-sanitization

2

cargo-fuzz

2