Results for “credentials”

Investigate compromised credentials across AWS, Azure, and GCP by correlating security alerts and audit logs. Examines unusual API activity and suspicious sign-ins, helps assess the affected scope, and guides containment actions such as disabling keys and revoking sessions.

• Investigate cloud API activity from unfamiliar locations
• Assess exposure after a credential leak notification
• Correlate suspicious sign-ins across cloud providers

Set up decoy credentials, storage, and secrets across AWS, Azure, and GCP to detect suspicious access. Connect audit logs to security alerts, verify detection, and document permissions, resource inventories, and maintenance plans.

• Detecting use of leaked cloud credentials
• Monitoring suspicious access to decoy storage and secrets
• Extending on-premises deception coverage to cloud environments

Access external APIs for email, calendars, GitHub, and payments through OneCLI Gateway. The proxy adds stored credentials to outgoing HTTPS requests, letting agents use connected services without handling secret values directly.

• Read email through the Gmail API
• Check Google Calendar events
• View GitHub repositories or create issues

Use external APIs and GitHub's gh command through Iron Proxy while keeping real credentials out of the client. The skill guides account setup through the operator console and helps investigate blocked requests using observed errors.

• Connect an external API account through the operator console
• Use gh with credentials managed by Iron Proxy
• Investigate requests returning 401 or 403 errors

Install or update Iron Proxy and its official Iron Control console for NanoClaw. Configure stored credentials, access grants, allowed destinations, and human approval checks for outbound requests through a local Docker installation.

• Install Iron Proxy and its management console
• Configure credentials and access grants
• Set allowed destinations and human approvals

Move an existing OpenClaw setup to NanoClaw v2 through a guided conversation. Review identity, memory, credentials, groups, and scheduled tasks, then decide what to transfer and preview changes before applying them.

• Moving an existing OpenClaw setup to NanoClaw v2
• Transferring agent personality and stored memories
• Sorting credentials into their required storage locations

Use n8n-mcp tools to find workflow steps, check settings, and create or update automations. Provides guidance on tool arguments, templates, folders, credentials, and security audits so agents can choose appropriate operations.

• Finding nodes and checking their settings
• Creating and updating workflows
• Finding and deploying workflow templates

Set up credentials and a development environment for your first Google Ads API request to retrieve campaigns. Choose from six official client libraries or direct HTTP requests, with guidance for account IDs, developer tokens, and common authorization errors.

• Prepare credentials for a first Google Ads API integration
• Build an example that retrieves advertising campaigns
• Choose a client library or direct REST requests

Get documentation-based help with deepsec, an AI vulnerability scanner. Initialize or resume setup, configure scans and model credentials, and create detection rules or plugins using the documentation bundled with the installed version.

• Initializing deepsec and resuming interrupted setup
• Configuring scans, models, and credentials
• Creating or customizing vulnerability detection rules

Assess enterprise Wi-Fi that uses 802.1X, a system for authenticating individual users or devices. Covers identifying authentication methods, testing rogue access points, reviewing certificate trust and storage, and assessing domain access through recovered credentials.

• Identify authentication methods on enterprise Wi-Fi
• Review client validation of authentication server certificates
• Assess EAP-TLS certificate storage and issuance

Handles credentials before Codex builds or runs tools that use the OpenAI API. Checks for an existing key without revealing it, asks whether to reuse or create one, and saves credentials only to a confirmed local destination.

• Check credentials before building an OpenAI-powered app
• Choose whether to reuse an existing key or create one
• Create and save an API key through the secure connector

Manage Mixpanel Headless login and connection settings, check credentials, and switch accounts, projects, or workspaces. Save named combinations of these settings as targets so an agent can select the intended connection together.

• Check the active account and project
• Set up login and test credentials
• Switch projects or workspaces

Use n8n-mcp tools to find workflow steps, check settings, and create or update automations. Provides guidance on tool arguments, templates, folders, credentials, and security audits so agents can choose appropriate operations.

• Finding nodes and checking their settings
• Creating and updating workflows
• Finding and deploying workflow templates

Let a Manager carry out Git operations for Workers that lack credentials. Structured requests specify the workspace and commands, while the workflow covers shared-file synchronization, processing markers to prevent conflicting edits, and success or failure reports.

• Delegating clone and push operations for Workers without credentials
• Requesting commits and branch operations
• Coordinating Git work in a shared workspace

Review git and gh operations in gh-aw workflows to check credential availability for each repository. Identify missing token handoffs, risky expansions of limited checkouts, and error handling needed where credentials are intentionally unavailable.

• Reviewing git operations after repository checkout
• Checking tokens for private cross-repository access
• Reviewing sparse and shallow checkout changes

Assess what exposed credentials can access in AWS, GCP, and Azure. Map permissions, test paths to higher privileges, and document demonstrated impact using benign test objects within an explicitly authorized assessment scope.

• Assessing the impact of exposed cloud credentials
• Reviewing paths to higher cloud privileges
• Checking storage access with benign test objects

Assess what discovered cloud credentials allow across AWS, Azure, GCP, and Kubernetes. The skill guides identity checks, permission review, and paths to higher privileges, then helps document impact, activity, and cleanup within the engagement's agreed scope.

• Assess permissions granted by discovered cloud credentials
• Review role trust and access across cloud accounts
• Check permissions assigned to anonymous Cognito identities

Store, retrieve, and pass credentials securely in MATLAB using the built-in MATLAB Vault (setSecret, getSecret, importSecrets, secretID) instead of hardcoding. Handles connections to any authenticated service: REST APIs, databases, cloud storage (S3/Azure/GCS), SFTP, and others. Covers API keys, tokens, passwords, SSH passphrases, CI/batch/scheduled jobs, and "keep credentials out of code" requests. Does NOT cover third-party secret managers (HashiCorp Vault, AWS Secrets Manager), OS-level key management, or the connection/query logic itself.

The English summary is being prepared. Showing the original description.

Find App Store Connect API credentials (key ID, issuer ID, .p8 file) on the user's machine and signed-in browser session, then log in with asc CLI. Use when asc auth is needed, credentials are unknown, user says "login to App Store Connect" or "find my ASC key", or before ns-ios-deploy-app.

The English summary is being prepared. Showing the original description.

Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.

The English summary is being prepared. Showing the original description.

Install and configure Adobe Developer Console OAuth Server-to-Server credentials. Use when setting up a new Adobe integration, configuring API credentials, or initializing Adobe SDKs (Firefly Services, PDF Services, I/O Runtime). Trigger with phrases like "install adobe", "setup adobe", "adobe auth", "configure adobe credentials", "adobe developer console".

The English summary is being prepared. Showing the original description.

Process OpenClaw GitHub Secret Scanning alerts, which flag exposed credentials. Inspect affected content, redact secrets, replace comments when needed, notify authors, and resolve alerts using a dedicated script under maintainer permissions.

• Investigating locations flagged for exposed credentials
• Redacting secrets in issue or pull request descriptions
• Deleting and recreating comments containing secrets

Create an interactive bash script for setup or migration steps that require a person. It guides dashboard actions, captures values, saves configuration and GitHub secrets, and requests confirmation at each stage.

• Guided setup of third-party services
• Entering credentials and saving them to .env
• Configuring GitHub secrets for CI

Plan and verify security controls for AI agents that read untrusted content and use tools. Review permissions, file boundaries, network destinations, and credentials, then test that rejected actions leave no unintended changes.

• Reviewing security boundaries in an agent runtime
• Checking isolation between tenants and workspaces
• Testing credential cleanup and tool output limits