redhatproductsecurity/prodsec-skills

145 skills610 total installsGithubGithubGitHub

database-security

10

mqtt-security

6

aws-security

6

secure-by-design

5

xml-serialization-security

5

model-registry-secure-storage

5

third-party-model-security

5

authentication-enforcement

5

session-management-cookies

5

agentic-actions-auditor

5

kafka-amq-security

5

libafl

5

model-security-scanning

5

sharp-edges

5

coverage-analysis

5

request-validation

5

secdevai-oci-image-security

5

authentication

5

zeroize-audit

5

vector-forge

5

defense-in-depth

5

oidc-integration

5

authorization

5

fuzzing-dictionary

4

rbac

4

secure-pipeline

4

os-tool-security

4

sbom-provenance

4

libfuzzer

4

software-signing

4

go-security

4

network-acls

4

containerization

4

avoid-api-keys

4

rate-limiting

4

hardening-local

4

agent-identity

4

variant-analysis

4

roots-support

4

scc-security

4

harness-writing

4

sarif-parsing

4

secure-storage

4

modern-python

4

observability

4

ai-code-review

4

tls-compliance

4

token-lifecycle

4

cargo-fuzz

4

network-security

4

git-cleanup

4

react-security

4

graphql-security

4

hardening-remote

4

secdevai-review

4

cpu-performance

4

safe-c-functions

4

reject-api-keys

4

workload-resilience

4

vulnerability-management

4

jwt-token-enforcement

4

runtime-restrictions

4

devcontainer-setup

4

admin-interface-security

4

service-to-service-mtls

4

bidirectional-filtering

4

simplicity-and-isolation

4

encrypted-communication

4

audit-context-building

4

mermaid-to-proverif

4

client-side-security

4

fips-compliance

4

secdevai-fix

4

differential-review

4

health-probes

4

property-based-testing

4

linux-capabilities

4

discovery-mechanism

4

algorithm-selection

4

helm-chart-security

4

web-application-security

4

crypto-protocol-diagram

4

oauth21-resource-server

4

operator-security

4

agent-to-mcp-server-auth

4

ai-systems-security

4

oauth-scopes-handling

4

oauth21-implementation

4

container-hardening

4

insecure-defaults

4

secure-token-handling

4

discovery-mechanisms

4

constant-time-testing

4

semgrep-rule-creator

4

wycheproof

4

http-security-headers

4

ossfuzz

4

isolation-sandboxing

4

codeql

4

apache-camel-security

4

semgrep

4

platform-integrity

4

client-metadata-support

4

no-credential-forwarding

4

constant-time-analysis

4

agent-to-agent-auth

4

external-idp-integration

4

consent-and-scoping

4

fuzzing-obstacles

4

model-registry-logging

4

compiler-hardening

4

file-handling-uploads

4

pod-access-control

4

sampling-controls

4

address-sanitizer

4

token-exchange-for-tools

4

mcp-client-dynamic-client-registration

4

output-validation-sandbox

4

fp-check

4

least-privilege-and-mediation

4

dynamic-client-registration

4

semgrep-rule-variant-creator

4

redis-elasticache-security

4

prompt-injection-mitigation

4

model-registry-model-security-scanning

4

mcp-client-protected-resource-metadata

4

build-yaml-misconfiguration

4

atheris

4

input-validation-injection

4

supply-chain-risk-auditor

4

protected-resource-metadata

4

dependency-vulnerability-audit

4

logging

4

ruzzy

4

aflpp

4

tool-server-injection-prevention

4

internal-application-routing

4

secrets-detection-patterns

4

logging-and-observability

4

model-registry-model-signature-verification

4

model-signature-verification

4

mcp-client-client-metadata-support

4

transparency-and-usability

4

input-output-sanitization

4

file-protection

4