AI导哈

测试与安全

security-patterns

yonatangross/orchestkit

Security patterns for authentication, defense-in-depth, input validation, OWASP Top 10, LLM safety, and PII masking. Use when implementing auth flows, security layers, input sanitization, vulnerability prevention, prompt injection defense, or data redaction.

  • 731 次安装
  • 299 星标
  • 收录于

安装命令

npx skills add https://github.com/yonatangross/orchestkit --skill security-patterns

SKILL.md

Security Patterns

Comprehensive security patterns for building hardened applications. Each category has individual rule files in rules/ loaded on-demand.

Quick Reference

Category Rules Impact When to Use
Authentication upstream CRITICAL JWT tokens, OAuth 2.1/PKCE, RBAC/permissions
Defense-in-Depth 1 CRITICAL Multi-layer security, zero-trust architecture
Input Validation 2 HIGH Schema validation (Zod/Pydantic), output encoding, file uploads
OWASP Top 10 1 CRITICAL Injection prevention, broken authentication fixes
LLM Safety refs HIGH Prompt injection defense, output guardrails, content filtering
PII Masking refs HIGH PII detection/redaction with Presidio, Langfuse, LLM Guard
Scanning upstream HIGH Dependency audit, SAST (Semgrep/Bandit), secret detection
Advanced Guardrails 2 CRITICAL NeMo/Guardrails AI validators, red-teaming, OWASP LLM

相关 Skills

devops-deploymentyonatangross/orchestkitUse when setting up CI/CD pipelines, containerizing applications, deploying to Kubernetes, or writing infrastructure as code. DevOps & Deployment covers GitHub Actions, Docker, Helm, and Terraform patterns.部署与运维1601responsive-patternsyonatangross/orchestkitResponsive design with Container Queries, fluid typography, cqi/cqb units, subgrid, intrinsic layouts, foldable devices, and mobile-first patterns for React applications. Use when building responsive layouts or container queries.设计与多媒体1553architecture-decision-recordyonatangross/orchestkitADR templates in the Nygard format with context, decision, consequences, and alternatives. Use when writing ADRs, recording an architectural decision, or evaluating options.营销与写作1519ui-componentsyonatangross/orchestkitUI component library patterns for shadcn/ui and Radix Primitives. Use when building accessible component libraries, customizing shadcn components, using Radix unstyled primitives, or creating design system foundations.前端开发1515rag-retrievalyonatangross/orchestkitRetrieval-Augmented Generation patterns for grounded LLM responses. Use when building RAG pipelines, embedding documents, implementing hybrid search, contextual retrieval, HyDE, agentic RAG, multimodal RAG, query decomposition, reranking, or pgvector search.数据与研究1508zustand-patternsyonatangross/orchestkitReference for Zustand 5.x state management including slices, middleware, Immer, useShallow, persistence, selectors, and devtools integration. Documents 7 core patterns with TypeScript examples and anti-patterns. Use when building React state management with Zustand instead of Redux.前端开发1453