'secure' 검색 결과

Review security across web apps, APIs, mobile apps, Kubernetes, and AI agents using six OWASP references. Identify risky authentication, access controls, configurations, and prompt handling, then use examples and checklists to plan fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review login flows and access controls
• Check API authorization and data exposure
• Review mobile app storage and communications

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Configure authentication and per-project request limits for Google Cloud API Gateway. Secure access to Cloud Run backends, validate quota changes against existing configurations, and investigate HTTP 429 or Service Control Quota errors, including on MCP-enabled gateways.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Configure API key and JWT authentication
• Restrict direct access to Cloud Run backends
• Validate request quota changes before deployment

Create and administer AlloyDB for PostgreSQL databases, including clusters, instances, backups, secure connections, and access permissions. It also covers command-line operations, infrastructure configuration, and MCP tools that let agents automate database tasks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create an AlloyDB cluster and primary instance
• Manage backups and plan recovery
• Configure secure connections and access permissions

Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing login with password hashing and rate limits
• Adding JWT validation and session protection
• Preventing SQL injection and malicious script execution

Review threat mitigations after a development phase is complete and update SECURITY.md with verification results. Use an existing security record or a threat model in the phase plan to guide the review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check security mitigations after completing a development phase
• Audit mitigations documented in SECURITY.md
• Verify completed work against a threat model in PLAN.md

Review smart contract security through five steps covering Slither scans, special features, diagrams, documented safety conditions, and manual checks. Get project-specific findings, testing setup guidance, and a prioritized action plan for development or deployment reviews.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review smart contract security before deployment
• Triage Slither findings and false positives
• Visualize inheritance and access permissions

Investigate insecure deserialization, where restoring objects from stored or transmitted data can execute unwanted code. Covers multiple languages, input format recognition, vulnerable processing points, verification methods, and documentation of affected libraries and entry points.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing code that restores objects from external data
• Identifying serialized data in cookies and request bodies
• Assessing message consumers and admission webhooks

External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE matrix (2018-2026), AAA backend identification, default credentials, configuration-disclosure paths, pre-auth RCE/SSRF/path-traversal exploits where applicable. Built from authorized-engagement Cisco ASA testing plus 2024-2026 enterprise VPN CVE landscape. Use whenever the target's perimeter exposes any SSL VPN appliance or remote-access gateway — these are the most common initial-access points in 2024-2026 actor TTPs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations. Use when the user wants to secure a new bucket, audit an existing bucket, fix a security finding, configure encryption, or enable logging and monitoring. Do NOT use for general S3 data operations, S3 Tables setup, or discovering existing data assets.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Apply Apollo.io API security best practices. Use when securing Apollo integrations, managing API keys, or implementing secure data handling. Trigger with phrases like "apollo security", "secure apollo api", "apollo api key security", "apollo data protection".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure Apify API tokens, configure proxy access, and protect Actor data. Use when hardening API key management, setting up environment-specific tokens, rotating a leaked token, or auditing Apify security configuration. Trigger with "apify security", "apify secrets", "secure apify token", "apify API key security", "rotate apify token".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Analyze and secure Alchemy credentials, browser access, wallet authority, webhook verification, and untrusted chain data. Use when securing an Alchemy-backed application. Trigger with "secure Alchemy", "Alchemy API key exposure", or "verify an Alchemy webhook".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize untrusted data via ObjectInputStream, unserialize, pickle, or similar mechanisms that may lead to RCE, file access, or privilege escalation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Reviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it. Use this to review an architecture or pull request for security, set secure coding standards, choose or tune SAST and DAST tooling, assess a third-party integration, or decide whether a design is safe to build.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures, connecting data centers to cloud, or implementing secure cross-premises networking.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Store, retrieve, and pass credentials securely in MATLAB using the built-in MATLAB Vault (setSecret, getSecret, importSecrets, secretID) instead of hardcoding. Handles connections to any authenticated service: REST APIs, databases, cloud storage (S3/Azure/GCS), SFTP, and others. Covers API keys, tokens, passwords, SSH passphrases, CI/batch/scheduled jobs, and "keep credentials out of code" requests. Does NOT cover third-party secret managers (HashiCorp Vault, AWS Secrets Manager), OS-level key management, or the connection/query logic itself.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure SSH servers and clients securely. Manage keys, tunnels, and config files. Use when setting up secure remote access.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Secure Docker images and container runtime configurations. Implement non-root users, read-only filesystems, and security contexts. Use when building secure container images or hardening container deployments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Manage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure WireGuard, OpenVPN, and cloud VPNs. Implement secure remote access and site-to-site connectivity. Use when setting up secure network tunnels.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.