643건 · 관련도순
Hunt OAuth 2.0 and OIDC flaws — redirect_uri abuse, state CSRF, PKCE bypass, scope manipulation, implicit-flow token theft, postMessage origin tricks, ID token sub claim swap, JWKS confusion, response_type confusion, and OAuth-CSRF. Use when an app has Google/GitHub/Facebook/Apple/custom OAuth or OpenID Connect.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Identify and exploit logic flaws in OAuth implementations, focusing specifically on the absence or improper validation of the `state` parameter, which leads to Cross-Site Request Forgery (CSRF) and account takeover (ATO).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM / service account authentication.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Webアプリのアクセス制御・認証・認可の実装はすべてこのスキルを使う。遮断だけならCloudflare Access、アプリ内identity・role・session・WebSocket等が必要ならBetter Authとする単一決定表の正本。「認証を付けて」「ログイン機能」「Googleでログインできるように」「社員だけに限定」「特定企業だけに公開」「許可リスト/招待制」「メール+パスワード認証」「セッション管理」「ロール・権限管理」「OAuth設定」「redirect_uri_mismatchを直す」「認証のセキュリティレビュー」などの文脈で、ユーザーが「認証」と明示しなくてもログイン要件が含まれるなら必ず読む。特にNext.js App Router＋OpenNext＋D1、Hono、素のWorkersでのBetter Auth＋Google OAuth導入を自動化し、Google Cloud Consoleで人間にしかできない操作は日本語のクリック手順と直リンクへ切り分ける。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detects and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID (Azure AD) token protection, conditional access policies, and sign-in anomaly detection. Covers access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Activates for requests involving OAuth token theft detection, token replay prevention, Azure AD conditional access token protection, or cloud identity attack investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tespit etme (s) and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID (Azure AD) token protection, conditional access policies, and sign-in anomaly Tespit. Covers access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Activates for requests involving OAuth token theft Tespit, token replay prevention, Azure AD conditional access token protection, or cloud identity attack investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Guide for adding new OAuth-based integrations to Fabric. Use when implementing OAuth providers like Microsoft Teams, GitHub, Google Drive, Slack, or similar services that need OAuth 2.0 authentication for user data access.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detects and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID (Azure AD) token protection, conditional access policies, and sign-in anomaly detection. Covers access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Activates for requests involving OAuth token theft detection, token replay prevention, Azure AD conditional access token protection, or cloud identity attack investigation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
API로 X(Twitter)에 게시물과 스레드를 올리고 이미지 업로드, 타임라인 조회, 검색, 반응 집계를 수행합니다. 인증 설정, 호출 한도 대응과 권한 오류도 다룹니다.
에이전트로 Gmail 메일과 Calendar 일정을 확인하고, Drive 파일 검색·공유부터 Docs 문서 작성과 Sheets 표 업데이트까지 함께 처리합니다.
Manage AI provider connections from the terminal. List configured services, test connections individually or together, rotate credentials, and inspect usage metrics. Validate local configuration without contacting providers when checking its structure.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Manage AI service connections in OmniRoute through its API. Add, update, remove, and test connections, maintain API keys and sign-in credentials, and inspect usage metrics and connection health.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Turn software development goals into manageable milestones with clear deliverables, dependencies, effort estimates, and success criteria. Use it to plan feature implementation, bug fixes, refactoring, performance improvements, and testing work.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Build and troubleshoot C#/.NET MCP servers that expose tools and information to AI agents. Guidance targets the official 2.x SDK and covers transport setup, authentication, interactive features, basic clients, and migration issues caused by changed defaults.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Investigate suspected email account takeovers by examining audit logs, sign-ins, inbox rules, and app permissions. Identify suspicious forwarding, unlikely travel between sign-ins, and unusual access, then summarize findings and recommended containment actions in a severity-rated report.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Connect Gmail, Calendar, and Contacts to track people awaiting replies and promises still outstanding. Get a prioritized digest with supporting quotes, email links, deadlines when available, and background context to help prepare a response.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Connect NanoClaw to Linear so an agent can respond to issue comments without mentions. The skill installs and checks the integration, guides authentication setup, and keeps each issue thread in its own conversation.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Set up access to Zoom Whiteboard through MCP, a connector interface for agent tools. Find authentication requirements, choose the correct board identifier, and follow workflows for listing and retrieving whiteboards, with a catalog of creation and metadata tools.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Helps implement Zoom Phone connections with CRM systems and web apps. Covers embedded calling, call history, call and SMS launch links, and automated call handling, with guidance on authentication, event processing, and security checks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Build Zoom Team Chat integrations for user messages or interactive bots. Guides API selection, authentication, message cards with buttons and forms, and webhooks that receive commands and user actions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Operate KubeSphere DevOps pipelines within a permitted project using KubeSphere APIs and OAuth authentication. Create pipelines, run selected branches, monitor execution, and retrieve logs or build artifacts without requiring cluster administrator access or direct Jenkins access.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Connect supported work apps through browser consent without sharing passwords with the agent. The skill checks available connection methods, provides a single-use authorization link when appropriate, and guides personal Slack account linking.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Find Linear issues by text, assignee, or status, and read their details and comments. Prepare new issues, comments, and status changes for user approval, then return identifiers and links so results can be checked.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.