'trust' 검색 결과

Cryptographic security for agentic systems — zero-trust agent networking, signed message envelopes (JWS/JWE), capability-based security (ocaps), Merkle tree audit trails, WASM sandboxing, and formal verification. Covers CLI dev tool security, mTLS between agents, permission boundaries (least privilege for AI agents), and supply chain security for skills/plugins. Activate on: "agent security", "zero trust agents", "secure agent communication", "capability-based security", "ocap", "signed messages between agents", "agent audit trail", "sandbox agent execution", "agent permissions", "mTLS agents", "cryptographic verification", "agent supply chain", "OWASP agentic", "prove agent did X", "tamper-proof agent logs". NOT for: application-level SAST scanning (use security-auditor), network firewall rules (use infrastructure), SOC2/HIPAA compliance (organizational), or prompt injection defense (use prompt-engineer).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Knowledge base from NIST SP 800-160 Vol 1 (Engineering Trustworthy Secure Systems) and Vol 2 (Developing Cyber-Resilient Systems). Use for systems security engineering (SSE): the three SSE framework contexts (problem/solution/trustworthiness), the 30+ design principles for trustworthy secure design, trustworthiness and assurance/assurance cases, security across the ISO/IEC/IEEE 15288 life-cycle process groups, and the Vol 2 cyber-resiliency engineering framework — 4 goals (anticipate/withstand/recover/adapt), objectives, 14 techniques, implementation approaches, and design principles for the APT/adverse-conditions threat model. Bridges systems engineering and the NIST security cluster (CSF/SSDF/RMF). Does not reproduce ISO/IEC/IEEE 15288 process text, nor cover SP 800-53 control catalogs in depth.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Cryptographic security for agentic systems — zero-trust agent networking, signed message envelopes (JWS/JWE), capability-based security (ocaps), Merkle tree audit trails, WASM sandboxing, and formal verification. Covers CLI dev tool security, mTLS between agents, permission boundaries (least privilege for AI agents), and supply chain security for skills/plugins. Activate on: "agent security", "zero trust agents", "secure agent communication", "capability-based security", "ocap", "signed messages between agents", "agent audit trail", "sandbox agent execution", "agent permissions", "mTLS agents", "cryptographic verification", "agent supply chain", "OWASP agentic", "prove agent did X", "tamper-proof agent logs". NOT for: application-level SAST scanning (use security-auditor), network firewall rules (use infrastructure), SOC2/HIPAA compliance (organizational), or prompt injection defense (use prompt-engineer).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

OpenClaw 취약점 보고를 출시 버전과 신뢰 경계에 비추어 확인합니다. 종료, 유지, 영향 범위 축소 여부를 판단하고 근거를 담은 관리자 답변 초안을 작성합니다.

• OpenClaw 취약점 보고를 판단할 때
• 출시 버전에 문제가 남았는지 확인할 때
• 기존 보안 권고와 중복되는지 확인할 때

가정 네트워크를 VLAN으로 용도별로 나누고 IoT 기기와 방문자를 PC 및 서버에서 격리하도록 스위치 포트, Wi-Fi 연결, 방화벽 규칙 설정을 돕습니다.

• 스마트 가전을 PC 및 서버에서 격리합니다
• 방문자 Wi-Fi를 인터넷 전용으로 제한합니다
• 스위치와 Wi-Fi에 VLAN을 배정합니다

Set up gbrain so a coding agent can call it. Install its command-line tool, initialize a local PGLite or Supabase brain, register MCP, the agent connection mechanism, and record trust policies for each remote.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up gbrain on a machine for the first time
• Initializing a local PGLite brain
• Configuring a Supabase brain

Check federation health, the connectivity between agents in separate installations. Summarize connected peers, trust levels and scores, active sessions, message exchanges, personal information redactions, and threat detections, with a search of stored federation history.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking connectivity between agent installations
• Reviewing connected peers and trust scores
• Reviewing sessions and message exchanges

Review a website’s Content Security Policy, which controls allowed resources, and identify unsafe HTML insertion. Guide policy changes and sanitization, then verify actual HTTP responses and browser behavior in a production-like environment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing an existing Content Security Policy
• Restricting scripts and third-party resources
• Checking how untrusted HTML is rendered

Research recent X posts by narrowing dates, trusted accounts, and keywords. Compare posts with web search results, link to the original posts, and distinguish reported reactions from claims that lack independent confirmation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check recent X reactions to news or product launches
• Research posts from trusted accounts
• Read replies and quotes for context

Investigate prompt injection in sandboxed security challenges by tracing how untrusted text changes an agent’s decisions or tool calls. Build a minimal reproduction and preserve evidence showing where external content crosses into trusted instructions or actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Trace instructions hidden in retrieved documents
• Investigate agent behavior changed by stored memory
• Reproduce altered tool arguments or secret exposure

Investigate Kerberos delegation, which lets services act on another identity, in a CTF sandbox. Trace delegation settings, issued tickets, and service acceptance to document a reproducible trust path and the privileges it actually grants.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying constrained, unconstrained, or resource-based delegation
• Tracing S4U steps and issued authentication tickets
• Verifying ticket acceptance and resulting privileges

Manage Codewhale skills from GitHub or local folders using native commands. List, install, update, activate, or remove skills, create a starter structure, and inspect community content before recommending trust for script and tool use.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Listing installed skills
• Installing a community skill from GitHub
• Updating or removing installed skills

Create a local Codewhale plugin bundle with a versioned manifest and Skills named with the plugin prefix. Validate its structure and present review results so a person can decide whether to trust and enable it.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create a local Codewhale plugin scaffold
• Package Skills under a plugin-specific prefix
• Add required MCP server settings

Set up mutual TLS, where services verify each other's certificates, to secure internal communication. The skill guides certificate hierarchy, rotation, gradual enforcement, and troubleshooting connection failures across services and clusters.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Introduce zero-trust service communication
• Plan certificate rotation and expiry monitoring
• Investigate TLS handshake failures

Configure AWS Verified Access for VPN-free access to internal applications. Combine user identity and device security checks, write Cedar access policies, and use Terraform and AWS RAM to deploy and share access controls across AWS accounts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Replacing VPN access to internal applications
• Writing policies based on users and device security
• Deploying Verified Access with Terraform

Deploy Prisma Access to secure access to internal applications for remote users and branches. Configure connectors, GlobalProtect agents, access policies based on user groups and device security, and centralized logging through Strata Cloud Manager.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Migrating VPN and branch security to Prisma Access
• Restricting internal app access by user and device
• Integrating access controls with existing Palo Alto NGFW systems

Set up encrypted connections between devices with Tailscale and control access by user or device. The skill covers network routing, device name resolution, and self-hosting the coordination server with Headscale.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Replacing a traditional VPN with Tailscale
• Restricting server access by team or device
• Connecting remotely to internal networks

Build a two-tier certificate authority with OpenSSL and Python, separating the offline root from the issuing authority. Covers server and client certificates, revocation checks, and policies that define certificate usage and trust.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up an internal certificate authority
• Issue server and client certificates
• Configure certificate revocation checks

Set up a Windows sandbox in Daytona to test OpenWork with a simulated corporate certificate authority. Check successful and broken HTTPS connections, the desktop app’s use of Windows trust, and certificate handling in runtimes it launches.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reproducing corporate certificate failures on Windows
• Checking OpenWork’s use of trusted Windows certificates
• Comparing valid and broken HTTPS certificate chains

Review an agent skill before installation or team deployment. It examines thirteen design criteria, legal workflow risks, dependencies, and suspicious instructions, producing an assessment with specific findings and recommended fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing a community skill before installation
• Checking an internal skill before team deployment
• Examining changed permissions in a skill update

Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review secret exposure in build environments
• Search build logs and caches for leaked credentials
• Assess trust settings between pipelines and cloud services

Test iPolloWork's handling of corporate certificates in a Daytona Windows sandbox. Set up valid and broken HTTPS certificate chains, then verify that the desktop app and runtimes it starts use certificates trusted by Windows.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reproduce corporate certificate failures on Windows
• Verify that the app uses Windows certificate trust
• Compare valid and broken HTTPS certificate chains

Create a Markdown threat model grounded in a codebase. Identify valuable assets, boundaries between trusted and untrusted components, realistic attack paths, and mitigations, then prioritize risks using explicit assumptions about likelihood and impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Map attack paths across a codebase
• Assess threats within a specific project directory
• Prioritize risks to data and credentials

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only). INVOKES: shell (powershell or bash), edit, create, ask_user for guided repo setup.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.