스킬 찾기

Match identified security threats with controls that prevent, detect, or help recover from attacks. Use the mappings to find coverage gaps, prioritize security spending, and create remediation plans with multiple layers of protection.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing security investments
• Creating a security remediation roadmap
• Checking gaps in existing security controls

Design and implement native iPhone and iPad interfaces with SwiftUI using Apple's design guidelines. Covers screen navigation, flexible layouts, system icons, accessibility, adjustable text sizes, and colors that adapt to light and dark modes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing iOS screens using Apple's guidelines
• Building layouts for both iPhone and iPad
• Implementing tabs and screen navigation

Compare competitors, pricing, and market positions to identify differentiation options. Use structured analysis and positioning maps, which compare businesses on key customer priorities, to assess market entry choices and whether competitive advantages can last.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Comparing competitors' products, prices, and sales approaches
• Mapping market positions to find unmet customer needs
• Choosing an initial target segment for market entry

Set up human approval for Claude Code actions such as PR reviews, merges, and CI changes. Configure Cedar authorization rules and signed records of allowed actions that can be checked offline with a public key.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Requiring approval before PR reviews and merges
• Gating issue actions and release publishing
• Requiring approval for CI changes and protected branch pushes

Build consistent interface foundations with design tokens, named values for colors, spacing, and typography. Covers light and dark themes, multiple brands, reusable components, and workflows that keep design definitions aligned with application code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Organizing shared colors, typography, and spacing
• Implementing light and dark theme switching
• Sharing interface components across multiple brands

Build and review interfaces against WCAG 2.2 accessibility guidelines. Covers keyboard navigation, screen readers that read interface content aloud, accessible forms, mobile support, and display preferences, helping identify and fix barriers to using a website or app.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit an interface for accessibility issues
• Add keyboard navigation and focus management
• Improve screen reader support for forms

Build and debug asynchronous Rust applications with Tokio, a runtime for scheduling work while operations wait. Apply patterns for task management, channels, error handling, cancellation, and concurrency limits when developing network services and other concurrent systems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build asynchronous network services
• Manage tasks and channel communication
• Design error handling and cancellation

Set up automated security checks that inspect source code without running the application. Configure Semgrep, SonarQube, or CodeQL, add project-specific rules, reduce false alarms, and define criteria for blocking problematic changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding automated security scans to CI/CD
• Creating security rules for project-specific code patterns
• Reducing false alarms and scan time

Identify security threats in system designs using STRIDE, a method covering six threat categories. Use structured questions to review components, prioritize threats by impact, and document findings and possible safeguards.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Start a threat modeling session
• Review the security of an existing system design
• Document threats and possible safeguards

Capture and analyze network traffic to understand custom protocols, including message boundaries and field meanings. Use the findings to document formats, investigate communication problems, and validate behavior through replay and tests with unusual inputs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating network communication failures
• Understanding proprietary message formats
• Documenting protocol specifications

Learn how to check Claude Code tool calls against a policy and create digitally signed execution records. This walkthrough covers setup, offline verification, tamper demonstrations, and CI/CD integration before adopting the protect-mcp runtime plugin.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Evaluate signed audit records before adopting runtime hooks
• Demonstrate offline verification and tamper detection
• Verify agent execution records in CI/CD

Identify software protections that hinder inspection, such as debugger detection and obfuscation that makes code harder to understand. Support authorized binary analysis and CTF security challenges with protection findings, bypass strategies, reports, and analysis scripts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identify protections in an authorized malware sample
• Plan analysis of a packed executable
• Implement debugger detection for a CTF challenge

Design backtests that evaluate trading strategies against historical data. Account for trading costs, avoid using future information or excluding delisted securities, and compare strategies using separate development and evaluation periods.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build a backtesting system for trading strategies
• Check for bias in historical performance estimates
• Compare strategies after accounting for trading costs

Analyze compiled programs without running them by recognizing branches, loops, data structures, and common instruction patterns. Use disassembly and decompilation, which translate machine code into readable representations, to reconstruct program logic and document findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Understand an unfamiliar executable
• Reconstruct branches and loops from assembly
• Infer data structures and function parameters

Add Python type hints and configure strict checking with mypy or pyright to catch type errors before execution. Covers reusable classes that preserve type information, interfaces defined by required members, and checks for possibly missing values.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding type hints to existing Python code
• Introducing strict type checks gradually
• Designing reusable classes with preserved types

Set up Python projects with uv, manage required packages, and create isolated environments for each project. Covers Python versions, dependency updates, migration from existing tools, and lockfiles that record package versions for repeatable installations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up a new Python project
• Migrate existing package management to uv
• Manage Python versions and isolated environments

Turn Python code into installable libraries or command-line tools. The skill guides project structure, package metadata, dependency settings, building wheel and source archives, and publishing releases to PyPI or private package repositories.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Packaging a Python library for distribution
• Creating an installable command-line tool
• Building wheel files and source archives

Measure Python execution time and memory use to locate slow or resource-heavy code. Use profiling results to guide improvements in data structures, caching, input and output operations, algorithms, and parallel processing.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding slow functions in Python applications
• Reducing memory use and investigating leaks
• Improving data processing and database queries

Define service reliability measurements and targets, then turn them into Prometheus monitoring rules and alerts. Calculate error budgets, the amount of failure allowed, and outline Grafana dashboards for tracking reliability and deciding when to prioritize fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting availability and response time targets
• Calculating and tracking error budgets
• Creating alerts for rapid error budget consumption

Design and refactor Python components with clear responsibilities and simple structure. Assess when to split large classes, combine objects instead of extending them, and extract shared code without introducing unnecessary abstractions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Defining responsibilities for a new Python component
• Splitting oversized classes and functions
• Deciding when to extract shared code

Implement Python error handling with early input checks, appropriate exception types, and clear messages. Handle individual failures in batch jobs, preserve error context for debugging, and use Pydantic models to validate structured input.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Validating user input and API parameters
• Designing exception types and clear error messages
• Continuing batch jobs after individual failures

Structure Python code to release files and database connections reliably, including when errors occur. Covers context managers, which handle setup and cleanup, asynchronous resources, nested cleanup, and streaming responses that retain accumulated state.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Releasing database connections when errors occur
• Cleaning up files and temporary files
• Creating asynchronous context managers

Set up rules that allow or block Claude Code tool calls, and record executed tool names in digitally signed receipts. The skill also explains offline verification and the limits of what those records prove.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Restricting which Claude Code tools may run
• Recording tool names in digitally signed receipts
• Verifying receipts offline with a public key

Investigate security incidents using memory dumps, saved copies of RAM. The skill guides memory acquisition, process and network analysis, suspicious code detection, and evidence extraction with Volatility and related tools, including checks for capture integrity.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Capturing RAM before shutting down a system under investigation
• Finding suspicious processes and network connections in memory
• Extracting executables and strings for malware analysis