'secrets' 검색 결과

Execute AEM Edge Delivery Services admin operations - list admins, add/remove users, preview, publish, unpublish content, clear cache, sync code, reindex, generate sitemap, manage snapshots, view logs, manage jobs, list sites, configure org/site settings, manage secrets and API keys. Also supports Document Authoring (DA) operations via admin.da.live - list/get/put content, copy, move, delete, versioning, and DA-specific preview/publish. Use for any Edge Delivery Services administrative task.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Deploy with unified build/test/deploy intent across providers using .agent-loom/deploy.yml and per-provider adapters. Load when the user asks to deploy, ship to preview, release to production, or run a provider-agnostic deploy flow. Also triggers on "deploy anywhere", "deploy to Vercel", "deploy with GitHub Actions", "preview deploy", or "ship this". Runs preflight before any deploy — stops on missing secrets. Pairs with ci-cd-and-automation for pipeline design. Ships vercel and github-actions adapters; extensible adapter interface.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Harden an application against common security risks — validate inputs at boundaries, least-privilege access, safe secrets handling, dependency hygiene, and secure defaults. Load when shipping user-facing code, adding auth/session flows, handling untrusted data, exposing APIs, or the user asks for "security hardening", "OWASP hardening", "secure this feature". Not for skill-library security gates (use secure-skill family).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when wrangler deploys silently fail or produce wrong artifacts, secrets upload as empty strings, custom domain DNS is not resolving, route assignment broke after rename, observability/tail logs are needed, D1/KV/R2 bindings are missing, OAuth scope errors block a command, cookies on a redirect are not attaching, or the worker exceeds CPU time. Triggers: "Tenant or user not found", "Authentication error" on wrangler d1 push, secret length is 0 after upload, route returns origin not worker, "compatibility_date too old", 1101 errors, custom_domain assignment lost on script rename. NOT for AWS Lambda / Vercel Edge / Deno Deploy (different runtimes), Cloudflare Zero Trust, or R2-specific tuning.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audits what Claude may do (permission rules, hooks, MCP scope, an agent's grants) and maps what it reaches on disk. Trigger on audit my permissions, why was this allowed, what stalls a routine, swap an allow for a deny, is this hook safe, gate my git pushes, a guard hook or call cap, PowerShell twins of Bash denies, where a rule should live, what is eating my disk, where has Claude been, config drift from a repo copy, skills loading twice; or say gatewarden (audit, harden, explain, scan, hooks, capreview, layout, map, footprint, drift, loads, status, refresh). Installs are trustwarden's; tokens keywarden's; secrets shieldwarden's; standing config rigwright's; agent design agentwright's.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Runs Hyper-V VMs and Windows Sandbox. Trigger to create, start, stop, check or delete a VM (Gen2, secure boot, virtual TPM, settings proved); to take, list or restore a checkpoint; to test a plugin install on a clean machine from a golden checkpoint; to open a suspicious file or zip in a disposable sandbox with networking off; when Hyper-V says access denied; or say hypervrunner (audit, setup, vm, checkpoint, teardown, cleanroom, sandbox, status). Runs as a Hyper-V Administrators member, never self-elevated. Containers and WSL are dockerrunner's; whether code is trustworthy trustwarden's; secrets in returned files shieldwarden's.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Vets third-party skills, plugins, MCP servers, GitHub Actions and model weights before install, with a verdict (PASS, CONDITIONAL, HOLD, FAIL) and install terms. Trigger on any should-I-install question, even with its files or hooks pasted in or a scan already clean; is this skill safe, vet this MCP server, check this GitHub Action, is this checkpoint safe or commercially usable, what does this installer write, a licence check before a fold-in, what changed in a plugin update; or say trustwarden (vet, revet, terms, refresh). Uses skillspector, zizmor, pinact and Scorecard when present; lists files no scanner read. Runtime permissions are gatewarden's; secrets shieldwarden's; your own skills skillwright's; sandboxing a download hypervrunner's.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Set up, resume or troubleshoot cmail custom-domain email (domain at any registrar → Cloudflare Email Routing → any inbox; optional GoDaddy automation and Gmail send-as): runs cmail setup itself, asking only for missing input, secrets or risky approvals. Don't use for mail migrations or campaigns.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use psamvault MCP server: credential vault, browser login, API key injection, .env secret protection. MCP tools keep secrets out of the agent's context window.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Set and wire Convex deployment env vars / secrets for the app.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Plan, validate, and use 1Password CLI setup for secret injection and auth. Use when tasks need 1Password CLI usage, secret references, op run/read/inject, or provisioning secrets via env vars/.env files and scripts.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Performs a comprehensive security review of code changes in a GitHub PR or issue. Checks out the branch, analyzes changed files against a 9-category security checklist, and produces PASS/WARNING/FAIL verdicts. Use when reviewing pull requests for security vulnerabilities, hardcoded secrets, injection flaws, auth bypasses, or insecure configurations. Trigger keywords - security review, code review, appsec, vulnerability assessment, security audit, review PR security.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

CI/CD pipeline patterns with GitHub Actions, release automation, and testing strategies. Use for: github actions, workflow, CI, CD, pipeline, deploy, release, semantic release, changesets, goreleaser, matrix, cache, secrets, environment, artifact, reusable workflow, composite action.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Clone/create/fork repos; manage remotes, releases.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configures Options pattern, user secrets, and feature flags. IOptions<T>, FeatureManagement.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when standing up a fresh deployment of this codebase (or the public vigyan-site-os template) — populates company identity, branding and starting content without committing any of it, and decides for each value whether it belongs in platform env, encrypted DB secrets, DB config, or an admin screen.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Migrates legacy AEM (6.x, AMS, on-prem) to AEM as a Cloud Service using BPA CSV or cache, CAM/MCP target discovery, and a one-pattern-per-session workflow. Use for BPA/CAM findings, Cloud Service blockers, or fixes for scheduler, ResourceChangeListener, replication, EventListener, OSGi EventHandler, DAM AssetManager, HTL data-sly-test lint. OSGi configs → Cloud Manager — scan ui.config, .cfg.json, secrets, $[secret:]/$[env:] — agent follows references/osgi-cfg-json-cloud-manager.md when prompted. After BPA/CAM discovery, migration hands off each (pattern, file) pair to the code-assessment skill — code-assessment owns the five pattern guides (scheduler/, resource-change-listener/, replication/, event-migration/, asset-manager/) and the shared references for SCR→DS, ResourceResolver/SLF4J, HTL lint, and prerequisites.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.