테스트·보안 스킬

Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube. Identify security vulnerabilities in source code before deployment. Use when implementing secure SDLC, code review automation, or security gates in CI/CD pipelines.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check. Identify and remediate vulnerable libraries in your software supply chain. Use when managing third-party dependencies or implementing software composition analysis.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Perform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for security vulnerabilities through automated and manual testing. Use when testing web applications, APIs, or performing penetration testing.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations. Use when implementing container security, building secure images, or meeting compliance requirements.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification, and emergency response playbooks.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scan systems and dependencies for CVEs and security vulnerabilities. Use tools like Nessus, OpenVAS, and Qualys to identify and prioritize vulnerabilities. Use when performing security assessments, compliance scanning, or vulnerability management.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls. Use when building, deploying, or hardening agentic AI systems that invoke tools, access data, or interact with production infrastructure.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure iptables, nftables, and cloud firewalls. Implement network segmentation and traffic filtering. Use when securing network perimeters or implementing security zones.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows. Use when deploying OpenClaw in home labs, startups, or production-like local AI infrastructure.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden Windows servers per security baselines and CIS benchmarks. Configure Group Policy, Windows Defender, and security features. Use when securing Windows Server environments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Handle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes. Use when responding to security events or building incident response capabilities.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit and remediate CIS benchmark violations. Use automated tools to assess compliance and implement hardening recommendations. Use when meeting compliance requirements or implementing security baselines.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Apply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure Docker images and container runtime configurations. Implement non-root users, read-only filesystems, and security contexts. Use when building secure container images or hardening container deployments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Perform basic penetration testing and security assessments. Use reconnaissance, vulnerability discovery, and exploitation techniques. Use when validating security controls or assessing system security.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Manage and secure company devices with MDM solutions — enroll macOS, Windows, iOS, and Android devices, enforce security policies, and automate software deployment. Use when setting up device management for a growing team.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS. Use when tightening security across company SaaS tools.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions. Control feature visibility, perform A/B testing, and enable trunk-based development. Use when implementing gradual rollouts, feature toggles, or experimentation platforms.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.