701건 · 관련도순
Provides patterns to configure AWS RDS (Aurora, MySQL, PostgreSQL) with Spring Boot applications. Configures HikariCP connection pools, implements read/write splitting, sets up IAM database authentication, enables SSL connections, and integrates with AWS Secrets Manager. Use when setting up RDS connections in Spring Boot, configuring connection pooling, or managing database credentials securely.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Azure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement React Server Actions in Next.js 14+ for secure, progressively enhanced form handling and server mutations without API routes. Use when handling form submissions, performing server-side mutations, implementing progressive enhancement, creating actions that work without JavaScript, validating data on the server, revalidating cached data after mutations, handling file uploads server-side, implementing optimistic UI updates, or building forms that gracefully degrade without client-side JavaScript.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Run Mom Test–style customer-discovery interviews to validate or kill an unbuilt idea — generate a non-leading interview guide, conduct or coach the conversations, and synthesize signal vs compliments. Load when the user asks to do customer discovery, run problem interviews, validate an idea with users, run a Mom Test, design an interview guide, or says "talk to customers", "validate the problem", "interview users", "Mom Test this", "did real users want it", "synthesize my interviews", "I just talked to N people". Sub-skill of `venture-exploration`. Hard-bans "would you use this?", solution-pitching, friend/family-only ICP, and treating compliments as validation. Calls `secure-*` before synthesizing any pasted external transcripts.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Azure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Build secure, scalable authentication and authorization systems using industry-standard patterns and modern best practices.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Designs cytosine (CBE, C-to-T) and adenine (ABE, A-to-G) base-editor guides by positioning the target base at the activity-peak of the editing window (protospacer positions ~5-7, PAM-distal numbering), minimizing bystander edits for product purity, reading dinucleotide context (APOBEC1 TC favored / GC disfavored), and selecting the editor variant (BE4max, ABEmax, ABE8e, YE1/SECURE, TadCBE, CGBE, SpG/SpRY-BE). Covers knockout by premature stop (CRISPR-STOP/iSTOP) and splice-site disruption, the three off-target classes (Cas-dependent, Cas-independent DNA, RNA), outcome prediction (BE-Hive/DeepBE), and the base-vs-prime-vs-HDR decision. Use when installing a transition mutation without a double-strand break, knocking out a gene without indels, or choosing CBE vs ABE. Generic guide scoring, prime editing, and HDR donors are separate skills.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill for transporting steel coils. Covers § 393.120 specific rules, chain requirements, dunnage placement, and inspection procedures.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill for transporting logs. Covers § 393.116 specific rules, bunks, stakes, and tiedowns required.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill for transporting heavy machinery (construction, agricultural, industrial). Covers § 393.130 rules, lashing requirements, and platform compliance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill for transporting pipes (water, gas, oil, structural). Covers § 393.122 specific rules and roll-prevention.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use this skill to respond to an FMCSA audit document request efficiently. Covers organization, file labeling, secure transmission.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Secure the path from an inbound event (webhook, email, SMS, GitHub comment, file, cron) to an agent spawn in the Port Daddy fleet. Use when wiring trigger sources to agents, reviewing the io-wiring registry, adding a trust/permission gate, hardening output sinks (SSRF/path traversal), scoping tools by provenance, or proving the spawn path is safe against prompt-injection → tool-abuse. Encodes ADR-0093 and the red-team threat model. NOT for generic Coast Guard sandboxing (ADR-0050), the macaroon push-grant gate alone (ADR-0053), or non-fleet code.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Multi-stage Docker build optimizer for minimal, secure production images. Activate on: Dockerfile optimization, multi-stage build, distroless image, container size reduction, Docker security scanning, BuildKit features. NOT for: container orchestration (use kubernetes-manifest-generator), CI/CD pipelines (use github-actions-pipeline-builder), runtime container config (use environment-config-manager).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Cryptographic security for agentic systems — zero-trust agent networking, signed message envelopes (JWS/JWE), capability-based security (ocaps), Merkle tree audit trails, WASM sandboxing, and formal verification. Covers CLI dev tool security, mTLS between agents, permission boundaries (least privilege for AI agents), and supply chain security for skills/plugins. Activate on: "agent security", "zero trust agents", "secure agent communication", "capability-based security", "ocap", "signed messages between agents", "agent audit trail", "sandbox agent execution", "agent permissions", "mTLS agents", "cryptographic verification", "agent supply chain", "OWASP agentic", "prove agent did X", "tamper-proof agent logs". NOT for: application-level SAST scanning (use security-auditor), network firewall rules (use infrastructure), SOC2/HIPAA compliance (organizational), or prompt injection defense (use prompt-engineer).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go), and not for general debugging or non-security tasks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Runs Hyper-V VMs and Windows Sandbox. Trigger to create, start, stop, check or delete a VM (Gen2, secure boot, virtual TPM, settings proved); to take, list or restore a checkpoint; to test a plugin install on a clean machine from a golden checkpoint; to open a suspicious file or zip in a disposable sandbox with networking off; when Hyper-V says access denied; or say hypervrunner (audit, setup, vm, checkpoint, teardown, cleanroom, sandbox, status). Runs as a Hyper-V Administrators member, never self-elevated. Containers and WSL are dockerrunner's; whether code is trustworthy trustwarden's; secrets in returned files shieldwarden's.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.