'controls' 검색 결과

Prepare SOX 404 testing materials for internal controls over financial reporting. Organize controls, select samples based on frequency and risk, and create workpaper templates with test procedures, evidence requirements, and a framework for assessing deficiencies.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Plan quarterly or annual internal control testing
• Select samples based on control frequency and risk
• Prepare testing workpapers for revenue, purchasing, or IT controls

Prepare internal audit materials for ISO/IEC 42001:2023, the AI management system standard. Identify gaps, link AI risks to controls, and build a 12-month audit plan with coverage priorities and auditor independence checks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Prioritizing gaps before certification
• Linking AI risks to Annex A controls
• Planning a year of internal audits

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Build 3D scenes in React from JSON specifications using json-render. The skill covers shapes, lighting, model loading, materials, cameras, and view controls, plus connecting component definitions to their rendering implementations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build a 3D scene from JSON
• Display GLTF or GLB models
• Configure lighting, materials, and shadows

Record a running CARLA simulation to a .log file for later replay or inspection. Capture object creation, movement, and traffic-light states, optionally include controls and velocities, and verify that the recording contains simulation frames.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Recording thirty seconds of simulated traffic
• Saving a scenario while it runs
• Capturing vehicle velocities and controls

Assesses smart contract and blockchain codebases against Trail of Bits’ nine-category maturity framework. Produces evidence-backed ratings covering areas such as arithmetic, access controls, documentation, and testing, plus a prioritized improvement roadmap with effort estimates.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing the maturity of a smart contract project
• Identifying gaps in tests and documentation
• Reviewing access controls and operational practices together

Assess GraphQL APIs during penetration tests, from finding endpoints and mapping data structures to checking access controls, query limits, subscriptions, and uploads. Includes example queries, guidance for testing tools, and defensive controls for interpreting findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Map GraphQL endpoints and data structures
• Check access controls across users and roles
• Review query limits and subscription security

Expose useful iOS app actions and content through Shortcuts, Siri, Spotlight, widgets, and controls. Guides action selection, system-facing data types, implementation, and checks that actions complete correctly or open the intended app workflow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Expose app actions through Siri and Shortcuts
• Open a specific app workflow from a system entry point
• Share action parameters with widgets and controls

[omh] Testing an internal control -- SOX, ICFR or ITGC: define the population and the sample, name the evidence that proves each item, re-perform the control, and grade any deficiency from stated likelihood, magnitude and compensating-control criteria, never by assertion. Use when the user says: internal-audit, internal audit, internal control, internal controls, internal control audit, control testing, test of controls, tests of controls.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Designs and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit. Use this to design controls for a process, prepare for an external audit, respond to an audit finding, set approval thresholds, or assess where a small team's segregation of duties is genuinely broken.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams. Covers the four ITGC domains external auditors test for SOX 404 — access to programs and data, program changes, computer operations, and program development — plus scoping in-scope systems from the financial statements, designing risk-and-control matrices (RCMs), writing control narratives and test scripts, evaluating deficiencies (control deficiency vs significant deficiency vs material weakness under AS 2201 and Reg S-X), drafting remediation plans, SOX 404(a)/404(b) applicability and filer status, IPO readiness timelines, and COSO 2013 alignment. Use this skill whenever a user mentions SOX, ITGC, IT general controls, 404(a)/404(b), ICFR, material weakness, user access reviews, segregation of duties in IT, change management controls for financial systems, SOX testing or walkthroughs, PCAOB audits, or quarterly compliance for financial reporting systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Extract component metadata from a Figma design system and generate production-ready QML controls. Use this skill whenever someone wants to turn Figma components into QML files — whether they say "generate components from Figma", "create QML controls based on a design system", "convert Figma components to QML", "build the component library", "extract button/input/checkbox from Figma", or anything similar. Requires design-tokens.json and QML design system singletons to already exist (from the token extraction skill). Uses Figma MCP to inspect components one at a time and maps variants, states, sizing, and token usage to idiomatic Qt Quick Controls 2 patterns. Trigger this skill at the component generation step of any QML design-system workflow.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when reviewing, designing, or modifying Java enterprise systems that may support EU Digital Markets Act gatekeeper-platform concerns, core platform services, interoperability, business-user data access, consent-dependent data combination, ranking, self-preferencing, advertising transparency, or anti-circumvention controls. This should trigger for requests such as Review a Java platform for DMA controls; Design interoperability and business-user data access evidence; Add ranking, consent, preference, or anti-circumvention audit controls; Assess gatekeeper-platform engineering evidence before production release. Part of Plinth Toolkit

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when reviewing, designing, or modifying Java enterprise systems that may support EU Market Abuse Regulation concerns, market surveillance, suspicious order and transaction reports, insider dealing controls, unlawful disclosure controls, market manipulation detection, inside information disclosure workflows, insider-list evidence, PDMR transaction notifications, alert explainability, model or rule provenance, reviewer decisions, or compliance escalation. This should trigger for requests such as Review a Java trading surveillance system for MAR controls; Design suspicious order and transaction monitoring evidence; Add alert explainability and reviewer-decision audit trails; Assess AI-assisted market-abuse detection before production release. Part of Plinth Toolkit

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when you need to answer "which attacker techniques do our controls actually stop, and how well?", "what controls should I have for this threat?", or "what telemetry should I collect to detect it?" — joining a customer's or your own security control baseline to ATT&CK techniques using a public, versioned evidence base of 9,545 control-to-technique mappings from six sources. Produces four ranked lists (addressed strongly, addressed weakly, real gaps, and techniques no control anywhere addresses). Use for control gap analysis, security programme prioritisation, board reporting on coverage, or the Resistance Strength side of a FAIR risk assessment. Invoke after /threat-actor-profiling or /lookup-liberty91 has produced a technique list.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build end-to-end tests that operate Windows desktop apps through pywinauto and Windows UI Automation, an interface for accessing screen controls. Covers stable element selection, waits, failure screenshots, test isolation, and CI setup for native applications.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building automated tests for Windows desktop workflows
• Diagnosing intermittent GUI test failures
• Adding stable identifiers to screen controls

NestJS의 API와 서비스를 설계하고 검토합니다. 기능별 코드 구조, 입력 검증, 인증, 예외 처리, 환경 설정과 테스트를 정리해 실제 운영을 위한 구현을 돕습니다.

• NestJS API 구조 설계
• 입력 검증과 접근 제어 구현
• 예외 처리와 환경 설정 검토

Review Laravel authentication, permissions, database operations, forms, APIs, and production settings for security weaknesses. Use implementation examples to address unsafe input handling, exposed secrets, session risks, and insufficient access controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing login and permission controls
• Checking database queries and input validation
• Reviewing forms for forged requests and unsafe scripts

React와 Next.js의 폼과 모달을 키보드와 화면 낭독기로 사용할 수 있도록 돕습니다. 레이블, 오류 표시, 포커스 이동을 구현하고 점검합니다.

• 폼 레이블과 오류 표시를 개선합니다
• 드롭다운의 키보드 조작을 점검합니다
• 모달을 열고 닫을 때 포커스를 관리합니다

Design continuous agent workflows with quality checks, evaluations, and recovery controls. Helps choose a loop pattern for the task and define how to pause, audit, narrow scope, and retry when work stalls or fails.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choosing a loop pattern for ongoing agent work
• Combining quality checks and evaluations
• Recovering from repeated failures or stalled progress

Integrate x402, an HTTP payment protocol, so agents can pay for APIs or services. Configure task and session budgets, approved recipients, and wallets with privately managed keys, using integration paths for Base, X Layer, or Solana.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Enable an agent to pay for a paid API
• Set task and session spending limits
• Restrict payment recipients, networks, and assets

Add a live adjustment panel to an HTML page so viewers can explore colors, text sizes, spacing, themes, and motion. Changes appear immediately and are saved in the browser for the next visit.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Fine-tune a landing page’s colors and spacing
• Demonstrate brand or design system variations
• Add adjustable appearance controls to a standalone demo