'severity' 검색 결과

Review economic reports for methodological gaps, unsupported figures, and errors such as double counting. Produce a red, amber, and green scorecard with issues ranked by severity, using the relevant appraisal framework and proposing corrections when requested.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking fiscal and macroeconomic briefings before submission
• Reviewing cost-benefit assumptions and double counting
• Auditing reports against a selected appraisal framework

Use SQLMap to test SQL injection, where application inputs can alter database queries. The skill guides automated detection, database and table discovery, selected data extraction, and documentation of the vulnerability type and severity.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing suspected SQL injection in an authorized web application
• Inspecting database, table, and column structures
• Testing POST requests captured with Burp Suite

Turn documented app journeys into a test plan covering normal use, edge cases, and failures. Run automated browser tests where possible, check remaining steps manually, and record reproduced bugs with severity, evidence, and fix status.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check every user journey before release
• Add automated browser tests with Playwright
• Test unusual inputs and access restrictions

Turn observed software names and versions into a prioritized list of known vulnerabilities using cve_lookup. Rank candidates by severity, available exploit code, and actual exposure, while keeping unconfirmed version matches clearly separate from verified findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding CVE candidates from service names and versions
• Prioritizing vulnerabilities for verification
• Reviewing details of high-severity CVE matches

Organize multi-agent reviews with defined roles for bugs, architecture, integration, and usability. Designed for local Codex workflows with vibe, it combines findings by severity into a shared set of keep, simplify, or remove decisions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assigning consistent reviewer roles when using /vibe
• Reviewing bugs, architecture, integration, and usability together
• Combining findings by severity into shared decisions

Compare current benchmark results, measurements of performance, with historical baselines to identify degradation between builds. Produce a comparison summary, rank affected metrics by severity, and outline questions for further investigation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Comparing performance between builds
• Reviewing performance degradation in CI/CD results
• Ranking degraded metrics by severity

Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema. Detects direct AND transitive vulnerabilities, normalizes npm's severity scale (info/low/moderate/ high/critical) to the shared Severity enum, and parses both v1 and v2 audit output formats so the skill works against npm 6 and npm 7+ lockfiles. Use when: pre-merge gate on a Node project, post-incident sweep after a transitive package compromise (e.g. event-stream, ua-parser, node-ipc, color.js), SOC2 vendor-management evidence collection, or auditing an inherited or acquired Node codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit npm deps", "npm vulnerability scan", "check node packages for CVEs", "npm audit".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema. Detects vulnerable direct AND transitive packages, normalizes pip-audit's severity output via OSV severity bands, falls back to pip list --outdated when pip-audit isn't installed, and supports requirements.txt, pyproject.toml (PEP 621), Pipfile.lock, and poetry.lock as input sources. Use when: pre-merge gate on a Python project, post-incident sweep after a PyPI compromise (e.g. ctx, request-toolbelt typosquats, ultralytics 8.3.42 compromise), SOC2 evidence collection, or inheriting an unfamiliar Python codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit python deps", "pip vulnerability scan", "check pypi packages for CVEs", "pip-audit run".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Turns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop (baseline snapshot -> interval sleep -> re-scan -> asset/finding delta -> threshold-gated webhook alert), the scan-to-scan diff engine (new/removed/changed assets by a tracked-attribute table, new/resolved findings by a stable cross-scan fingerprint), adversary CTI / chatter monitoring across six public feeds (ransomwatch, ransomware.live, HackerNews Algolia search, Reddit security-subreddit RSS, GitHub Gist code-search, public Telegram channel scraping) with a source-kind-aware severity engine (leak-site/forum/telegram/paste tiers, CRITICAL through INFO), literal/glob/regex watchlist pattern matching, full-corpus capture with retroactive rescan on new watchlist entries, infrastructure-tracking-over-time discipline (certificate-transparency, passive-DNS, port/service, and typosquat re-enumeration cadence, and what a genuine 'perimeter drift' event looks like in the diff output), a five-state finding-lifecycle state machine (open/triaged/risk_accepted/resolved/false_positive) with per-severity SLA and fingerprint-based cross-scan dedup and auto-resolve/reopen rules, the alert-fatigue trap where a lifecycle-unaware rule re-fires on an already-accepted finding, a durable retry/backoff alert-outbox pattern ('queued is not delivered'), and copy-paste bash-cron plus PowerShell-Scheduled-Task recipes for a re-scan+diff loop with the Slack-compatible webhook payload shape. Passive OSINT and analysis only -- no new active-intrusion technique. Use when setting up ongoing monitoring for a retainer or MSSP engagement, tuning alert thresholds to avoid fatigue, triaging a finding's lifecycle status, investigating adversary chatter about a brand, building a 'what changed on the perimeter since last week' report, or deciding whether a persisting finding should re-alert.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Triage an incoming insurance claim: check the coverage trigger against policy wording, band severity and complexity, screen for fraud indicators, set a first-pass reserve range, and route with an SLA. Use when asked to triage a claim, review a first notice of loss (FNOL), assess a new claim, decide fast-track vs adjuster routing, or screen a claim for SIU referral. Produces a structured triage note with coverage view, severity band, indicator screen, reserve range, and a routing recommendation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Monthly on the last weekday, light browser lane. Re-tests every theme and every severity rule against a month of real ticket evidence and rewrites strategy/themes.md wherever the evidence disagrees with the assumption. It merges two themes the evidence shows are one, splits a theme whose tickets have two different answers, retires a theme with no volume, creates a theme for a cluster that kept landing unclassified, and rewrites a severity rule wherever the outcomes contradict it. Theme ids are never reused and never renumbered. It holds every outbound action unless you released the channel, and it never touches a credential.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Weekdays, conditional browser lane. Selects from the ticket ledger hardest first, meaning by severity and then by age within severity, and writes each customer a reply into a dated queue file the member reads, edits, and sends by hand. Where the right answer is a refund, a credit, a plan change, or a cancellation, it names the remedy, the exact amount, and the exact screen, and leaves the granting to the member. It sends only where you released the channel, never posts, never resolves a ticket, spends only where you released it, and never touches a credential.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use a repo-root `.editorconfig` to configure free .NET analyzer and style rules. Use when a .NET repo needs rule severity, code-style options, section layout, or analyzer ownership made explicit. USE FOR: the repo needs a root .editorconfig; analyzer severity and style ownership are unclear; the team wants one source of truth for rule configuration. DO NOT USE FOR: choosing analyzers with no config change; formatting-only execution with no config ownership question. INVOKES: inspect the repository context, edit targeted files, and run relevant build, test, lint, or validation commands when changes are made.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Provides a structured risk scoring methodology for Data Protection Impact Assessments aligned with ENISA threat taxonomy and ISO 29134. Covers likelihood and severity assessment, risk matrix construction, inherent vs residual risk calculation, and risk appetite thresholds per EDPB WP248rev.01 guidance. Keywords: risk scoring, DPIA risk matrix, likelihood, severity, ENISA, ISO 29134, residual risk, risk appetite.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hybrid fingerprint + LLM pipeline for bug classification, deduplication, and ticket generation. Normalizes CI logs, creates stable fingerprints, clusters near-duplicates, then uses LLM for severity classification and ticket writing. Includes bug reporting templates and severity/priority matrix. Use when: "bug triage," "classify bugs," "failure analysis," "auto-classify," "CI failures," "bug report," "defect template." Not for: runtime self-healing of one flaky locator — use test-reliability. Not for: designing new tests from production telemetry — use observability-driven-testing. Related: qa-metrics, qa-dashboard, ci-cd-integration, qa-project-context.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Bug bounty report triage, validation, and severity escalation. Use when the user provides a bug bounty report to validate, wants to check if a finding is submittable, needs to escalate severity for maximum payout, or says 'triage this', 'validate this report', 'escalate this', 'is this submittable', 'check this bounty report', 'max bounty', or 'will this get accepted'.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use this skill when something is happening now: an alert, a suspicious login, a ransomware note, data sent to the wrong customer, an outage that might be an attack, and someone asks "how bad is this", "classify this incident", "is this a SEV1", "who do we wake up", "is this a breach", "do we need to notify anyone" or "start the incident log". Classifies the incident on the company's own scale in minutes, decides who is called and how fast, flags any regulatory or contractual clock, lists the evidence to preserve, and starts a timestamped triage record that is revisited as facts change.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use this skill when a set of policies, procedures, plans and registers has grown in pieces and someone asks "check our documents for contradictions", "are our policies consistent", "the retention periods don't match", "which severity scale is right", "harmonise our ISMS documents", "cross-check the incident plan against the policy" or "clean up our documentation before the audit". Extracts the checkable facts from every document (periods, deadlines, scales, roles, labels, references), finds contradictions, naming drift and broken references, proposes which document owns each fact, and drafts a glossary and a fix list for the owners.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Open, classify, and escalate support cases with Salesforce Technical Support via the Help portal: choosing severity, engaging Premier Success, the Escalate to Technical Support Management path, tracking incidents on the Trust site. NOT for escalating your own org's cases after N hours - use admin/escalation-rules. NOT for SLA milestone timers and entitlement processes - use admin/entitlements-and-milestones.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Classify the severity of hypercalcemia at the bedside — mild, moderate, or severe — by combining the corrected/ionized calcium level with the acuity and symptom pattern, and decide whether the patient needs urgent therapy. Trigger when a clinician asks "is this hypercalcemia severe", "how bad is this calcium level", "when to admit for hypercalcemia", "is this hypercalcemic crisis", "how to grade hypercalcemia", or shares a calcium level and asks how worried to be.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.