649건 · 관련도순
Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Practical security review and hardening guidance for application code in Python, JavaScript/TypeScript, and Go. Use this skill whenever the user asks for a security review or audit, wants to harden authentication (password hashing, sessions, JWT, OAuth2/OIDC, MFA), fix OWASP Top 10 issues (injection, XSS, IDOR, CSRF, SSRF, deserialization), threat-model with STRIDE, clean up secrets and .env handling, or set up dependency scanning (pip-audit, npm audit, osv-scanner, gitleaks, SBOM). Also trigger for "make this secure", "is this safe to deploy", bcrypt/argon2id, rate limiting logins, RBAC/ABAC, CSP and security headers, cookie flags, and secure-by-default coding help.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Review trust boundaries, input validation, permissions, abuse resistance, secrets, and safe failure behavior.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Load this skill whenever you are filing, reviewing, or generating accessibility bug reports — whether from automated tool output, manual testing, user reports, or testing with disabled people. The purpose of this skill is to make accessibility findings easier to report accurately, connect them to real people and tasks, and let developers reproduce, understand, and fix them without unnecessary back-and-forth. Absolutely always describe the barrier and its task impact before citing a WCAG criterion. Under no circumstances guess a disability diagnosis, treat automated tool output as a conformance conclusion, or expose secrets/personal data in a report.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Operational readiness checklist (security, cost, legal, data design, performance, incident response, LLM integration defenses) applied when a change touches deployment, infrastructure, external services, secrets, or user data.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
GStack deployment setup method for planning environment, config, secrets, build, deploy, and verification gates before release operations.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
You are a security engineer. Auto-detect package managers, scan for vulnerabilities and leaked secrets, fix what's fixable, report the rest. Covers the dependency tree and tracked files — reviewing a pending diff's security belongs to a platform-native security-review skill when present.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scan dependencies and tracked files for known vulnerabilities and leaked secrets; fix what's fixable, report the rest. For reviewing a pending diff, prefer a platform security-review skill.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Connect, authenticate, and verify any SaaS CLI tool. Reads credentials from `.env`. Never prints secrets.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
火山引擎 Supabase 实例的直连开发与运维 Skill。使用 byted-supabase-cli 管理 Auth、数据库、Storage、Edge Functions、Secrets、Pages、种子数据、类型生成和 MCP；当用户提供 Supabase URL、anon key、service-role key、database URL，或要求直接操作某个 Supabase 实例时使用。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when building anything that accepts user input, implementing authentication or authorization, storing or transmitting sensitive data, integrating external APIs, or adding file uploads, webhooks, or callbacks. Covers input validation, secrets, authz checks, and PII and payment handling.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Streamlit Web application development expert skill. Provides guidance on OIDC authentication (st.login/st.logout/st.user), secrets management, data visualization with Plotly/Altair, performance optimization with caching, and modern Streamlit features (v1.42-1.52+). Use this skill when building Streamlit apps, implementing user authentication, creating data dashboards, or optimizing app performance. Triggers include "streamlit app", "st.login", "data dashboard", "streamlit authentication", "streamlit visualization".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
governance secret helperの利用可否を確認したいとき、key名とbackendを値を露出せず監査したいときに使う。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Set up notebook-connector configuration for Exasol AI workflows through the Secrets Python API. Covers secure config store (`scs`) creation, the `AILabConfig` and `StorageBackend` key sources, backend-specific config values such as `db_host_name`, `db_schema`, `storage_backend`, and `huggingface_token`, Python validation, and handoff to downstream notebook-connector skills.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Apply the "GitHub Actions and Renovate Guide" to configure repo settings, branch protection, GitHub App/PAT secrets, and renovate.json5 for personal or team GitHub projects. Use when asked to introduce Renovate, enable dependency auto-updates, or align settings with the guide.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Set and wire Convex deployment env vars / secrets for the app.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Set and wire Convex deployment env vars / secrets for the app.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Extract DPAPI-protected secrets such as credentials and browser data offline and online.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
- Extract and interpret embedded file metadata with exiftool — EXIF GPS coordinates, camera make, model and serial, DateTimeOriginal and CreateDate timestamps, XMP and IPTC fields, and Office and PDF… Use when reading EXIF from a photo, checking who really wrote a document, dating a file, fingerprinting a camera or phone, or investigating provenance in JPEG, HEIC, RAW, MP4, DOCX, XLSX or PDF
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Hardcoded-secret detection — AWS keys, GitHub PATs, Slack tokens, Stripe keys, generic high-entropy strings. Pre-commit (`--staged-only`), explicit paths, or full repo. Use when guarding `git commit`, auditing a repo for leaked credentials, validating no secrets entered the diff before push, or producing a rotation list for an exposed-secret incident.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.