Security
4,732 results
- Pipeline Health AnalyzerMicrosoftOfficialReviews opportunities in the sales pipeline to identify stuck deals, missing next steps, weak qualification, and unbalanced stages. Use when user asks "how is my pipeline looking", "analyze pipeline health", "which deals are stuck", "pipeline review", "find at-risk deals", "identify stalled opportunities", or "audit my open deals".
- Purview Dlp IntegrationMicrosoftOfficialIntegrate Microsoft Purview DLP (data loss prevention) + audit into an existing Microsoft Agent 365 (A365 SDK) agent, so sensitive prompts are blocked before the LLM and responses can be audited. Use when a user wants to add Purview DLP to an AI agent, block sensitive data (credit cards, SSNs, PII) in agent turns, enforce data protection/compliance on an A365 AgentApplication, call the Graph…
- Fixing Windows Only ModulesMicrosoftOfficialHandle Windows PowerShell-only modules (ActiveDirectory, ServerManager, Hyper-V, FailoverClusters, BitLocker, NetSecurity, Dism, Storage, ScheduledTasks, WebAdministration) that are not natively available in PowerShell 7.x, using Import-Module -UseWindowsPowerShell (the WinPS compatibility layer) or implicit remoting.
- Managing Blazor Server AuthenticationMicrosoftOfficialManages authentication in Blazor Server applications with ASP.NET Core Identity. Solves critical Blazor Server auth issues: HttpContext NULL errors during WebSocket circuits, cookie auth operations failing silently in component handlers, login/logout not working in interactive mode, SignInManager returning null, cascading auth state parameter errors.
- Migrating Cryptography NamespacesMicrosoftOfficialMigrates System.Security.Cryptography namespace usage from .NET Framework to modern .NET. Analyzes C# source files to detect cryptographic type usage and adds the correct using statements and NuGet packages after the namespace split (X509Certificates, Pkcs, Xml).
- Migrating Csharp Nullable ReferencesMicrosoftOfficialEnable nullable reference types in a C# project and systematically resolve all warnings. Use when adopting NRTs in existing codebases, performing file-by-file or project-wide nullable migration, fixing CS8602/CS8618/CS86xx warnings, annotating APIs for nullability, cleaning up null-forgiving operators, or upgrading dependencies with new nullable annotations.
- Migrating Federated Oidc Token ExchangeMicrosoftOfficialMigrates an endpoint that exchanges an external identity provider's workload token for a short-lived application credential — trusted publishing, workload identity federation, federated credentials, OIDC credential exchange.
- Migrating Owin Authentication Handler To CoreMicrosoftOfficialMigrates a custom Katana/OWIN authentication handler to an ASP.NET Core authentication scheme. Use when an application defines its own scheme by deriving from the OWIN AuthenticationHandler base class in Microsoft.Owin.Security.Infrastructure — usually with its own AuthenticationMiddleware subclass and IAppBuilder extension — and the equivalent ASP.NET Core handler must be registered with…
- Migrating Owin Cookie AuthMicrosoftOfficialMigrates legacy OWIN cookie authentication (Microsoft.Owin.Security.Cookies) to ASP.NET Core cookie authentication (Microsoft.AspNetCore.Authentication.Cookies). Use ONLY when Microsoft.Owin.Security.Cookies has been flagged as obsolete or deprecated and must be replaced — not for version-bump scenarios where the OWIN package is still supported.
- Migrating Owin Oauth To JwtMicrosoftOfficialMigrates OWIN OAuth bearer authentication and OWIN-hosted custom Entra ID (Azure AD) token validation to ASP.NET Core AddJwtBearer. Covers Microsoft.Owin.Security.OAuth, JsonWebTokenHandler, TokenValidationParameters, ConfigurationManager and OpenIdConnectConfiguration for JWKS caching, AadIssuerValidator, custom IssuerValidator and IssuerSigningKeyValidator, EnableAadSigningKeyIssuerValidation…
- Migrating Owin Openid ConnectMicrosoftOfficialMigrates legacy OWIN OpenID Connect authentication (Microsoft.Owin.Security.OpenIdConnect) to ASP.NET Core OpenID Connect (Microsoft.AspNetCore.Authentication.OpenIdConnect). Use ONLY when Microsoft.Owin.Security.OpenIdConnect has been flagged as obsolete or deprecated and must be replaced — not for version-bump scenarios where Microsoft.Owin.Security.OpenIdConnect is still supported.
- Sharing Authentication Cookies Katana InteropMicrosoftOfficialShares authentication cookies between Katana/OWIN applications on ASP.NET Framework and ASP.NET Core applications during side-by-side migrations. Use when both hosts must accept the same cookie, when AspNetTicketDataFormat, DataProtectorShim, or Microsoft.Owin.Security.Interop is needed, or when users must remain signed in while routes move behind YARP or System.Web Adapters.
- Netlify MCP ServersNetlifyOfficialBuild, deploy, and secure Model Context Protocol (MCP) servers on Netlify. Use whenever the task involves creating an MCP server, exposing an app or API to AI agents as MCP tools, letting Claude / Cursor / Claude Code call a custom remote server, or adding MCP tools to an existing Netlify site.
- Multi Tenant IsolationAWSOfficialThis skill should be used when designing or fixing tenant isolation for a multi-tenant SaaS on AWS, where a team with no dedicated security engineer must make a cross-tenant leak structurally impossible rather than a code-review responsibility.
- Azuresql Db AuthMicrosoftOfficialConnects an app to the Azure SQL Database container securely, with a least-privilege database user instead of the sa login, the right auth method per environment, and safe handling of the connection secret.
- Dependency ScanningGitHubOfficialScan repository dependencies for known vulnerabilities using the GitHub MCP Server's Dependabot toolset and the GitHub Advisory Database. Use when asked to check dependency security, audit lockfiles, or verify packages before merging.
- github/copilot-advanced-security-pluginGitHubOfficialCollectionThe official GitHub Copilot Advanced Security plugin
- Analyze Log SignalsOpenAIOfficialAnalyze reviewed Grafana log evidence for event patterns, error-rate changes, and enrolled security markers. Use when a user needs bounded log analytics for an incident window, error-log comparison, anomaly triage, operational debugging, or a cautious check of approved security signals.
- Audit Ios ReadinessOpenAIOfficialRun a read-only App Store-readiness preflight for a declared iOS target without claiming approval or submitting anything.
- Audit Review Eval ValidityOpenAIOfficialAudit whether a declared local review evaluation can support fair quality claims. Use only when the user explicitly asks to audit review-eval validity or use the bundled synthetic fixture.
- Inspect Fusion DesignOpenAIOfficialInspect an explicit Fusion design, parameters, geometry, references, configuration and health without editing it. Use for model understanding or engineering audits.
- CouncilifyMicrosoftOfficialBuild a NEW complete "council" for a domain — a panel of orthogonal review lenses that fan out cold, debate to consensus, and return a synthesized verdict with recorded dissent, exactly like /council and /design-council.
- 1passwordopenclawSet up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
- Auto QaopenclawContinuously audit, live-test, and stress-test the current OpenClaw codebase across at least ten independently scoped subsystem lanes; default to 100 independently verified, landed root-cause fixes, maintain an evidence-backed report, and announce each merged pull request immediately.