'sec' 검색 결과

Manage secrets and environment variables using the Doppler CLI. Use when the user wants to set up Doppler, inject secrets into processes, manage projects and configs, upload or download secrets, create service tokens, use secret templates, or integrate Doppler with Docker, Kubernetes, or CI/CD pipelines. Trigger words: doppler, secrets manager, env vars, secret injection, doppler run, doppler setup, service token, secret rotation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Sector Rotation & Analysis — analyzes sector momentum rankings across all 11 GICS sectors, money flows, economic cycle positioning, relative strength, top stocks per sector, valuations, and rotation signals. Triggered by "trade sector <sector>" or "trade sector rotation".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit tools), Binary Authorization, enabling Shielded Nodes, GKE Sandbox cluster enablement, GKE IAM roles, and cross-service authentication IAM patterns. Use when securing cluster control planes, hardening GKE RBAC, enabling Shielded Nodes, enabling GKE Sandbox runtime, enabling cluster-wide security add-ons, or managing GKE IAM roles. Don't use for workload-level security (Workload Identity, SecretProviderClass, PSS, NetPol, gVisor pod runtimeClassName; use gke-workload-security instead).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

bu skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS. It addresses Tespit etme misconfigurations in Terraform, CloudFormation, Kubernetes manifests, and Helm charts before Dağıt:ment, establishing policy-based governance, and integrating IaC scanning into CI/CD pipelines to prevent insecure cloud resource provisioning.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Apply Adobe security best practices for OAuth credentials, secret rotation, I/O Events webhook signature verification, and least-privilege scoping. Use when securing API credentials, implementing webhook validation, or auditing Adobe security configuration. Trigger with phrases like "adobe security", "adobe secrets", "secure adobe", "adobe credential rotation", "adobe webhook signature".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules, JWT/session strategies, SecurityService checks, CORS, CSRF awareness for browser apps, rejection handlers, and sensitive-data-safe logging. This should trigger for requests such as Add Micronaut security support; Review Micronaut security configuration; Improve API authorization in Micronaut; Add JWT security in Micronaut; Harden Micronaut route authorization rules. Part of cursor-rules-java project

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs. Use when: "security audit", "threat model", "pentest review", "OWASP", "CSO review". (gstack) Voice triggers (speech-to-text aliases): "see-so", "see so", "security review", "security check", "vulnerability scan", "run security".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Presents a risk framework for every configurable security control in NemoClaw. Use when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Trigger keywords - nemoclaw security best practices, sandbox security controls risk framework, nemoclaw credential storage, credentials.json, api key security, openclaw security controls, nemoclaw security boundary, prompt injection, tool access control.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Django 앱의 로그인, 권한, 입력 처리와 운영 설정을 점검합니다. 악성 쿼리와 스크립트, 원치 않는 요청의 방어부터 파일 업로드와 API 보호까지 검토합니다.

• 로그인과 사용자 권한 검토
• 공개 전 운영 환경 설정 점검
• 입력 처리와 요청 보호 검토

랜딩 페이지와 제품 사이트의 디자인을 섹션별 가로 이미지로 만듭니다. 색상과 서체를 통일하며 구도와 여백, 버튼 표현을 달리해 구현 참고 자료로 제공합니다.

• 랜딩 페이지를 섹션별로 검토합니다
• 첫 섹션의 구도를 검토합니다
• 개발자에게 참고 이미지를 공유합니다

Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing security boundaries and potential threats
• Updating dependencies and checking audit results
• Revising password hashing and credential generation

Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing security boundaries and potential threats
• Updating dependencies and checking audit results
• Revising password hashing and credential generation

Set up automated security checks that inspect source code without running the application. Configure Semgrep, SonarQube, or CodeQL, add project-specific rules, reduce false alarms, and define criteria for blocking problematic changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding automated security scans to CI/CD
• Creating security rules for project-specific code patterns
• Reducing false alarms and scan time

Generate Kubernetes YAML files that define how applications run, connect, receive configuration, and use persistent storage. Include resource limits, health checks, security settings, labels, and validation guidance for production-oriented deployments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating Deployment and Service manifests
• Separating configuration with ConfigMaps and Secrets
• Defining persistent storage for applications

Configure GitHub Dependabot to keep dependencies, the packages a project relies on, updated. Organize update pull requests into groups, set schedules and exclusion rules, and configure security updates across projects with multiple packages or package systems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create or revise dependabot.yml
• Group dependency updates into fewer pull requests
• Configure updates across a monorepo

Set up decoy credentials, storage, and secrets across AWS, Azure, and GCP to detect suspicious access. Connect audit logs to security alerts, verify detection, and document permissions, resource inventories, and maintenance plans.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Detecting use of leaked cloud credentials
• Monitoring suspicious access to decoy storage and secrets
• Extending on-premises deception coverage to cloud environments

Investigate security incidents in Splunk by connecting authentication, endpoint, and network logs. Use SPL, Splunk’s search language, to identify suspicious activity, reconstruct event timelines, document findings, and develop detection rules.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating suspicious logins across multiple log sources
• Reconstructing an incident timeline
• Tracing suspicious processes and outbound traffic

Prepare for CMMC Level 2, a cybersecurity certification for defense contractors. Define the systems handling controlled information, review security requirements, calculate the SPRS assessment score, and organize remediation plans and evidence into a readiness report.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Define the assessment scope for systems handling controlled information
• Calculate an SPRS score and prioritize unmet security requirements
• Prepare security plans, remediation milestones, and assessment evidence

Assess web applications, APIs, and infrastructure for security weaknesses through authorized testing. The skill guides code review, dependency and secret scanning, targeted vulnerability checks, and report creation with evidence, severity ratings, and remediation priorities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check a web application against the OWASP Top 10
• Test API authentication and access controls
• Scan dependencies and Git history for security risks

Load API keys, tokens, and other secrets from Infisical into a shell or a specific command. The skill covers finding secret names, checking availability, and passing values to commands without displaying or logging them.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Loading a missing API key before running a command
• Passing secrets only to the process that needs them
• Checking secret names and availability without displaying values

Helps address Google Cloud Security Command Center findings by planning targeted fixes for permissions, misconfigurations, vulnerabilities, and combined attack paths. It includes impact checks, verification, rollback steps, and execution after user approval.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Fix excessive permissions flagged by Security Command Center
• Plan fixes for exposed buckets or firewall rules
• Address attack paths involving multiple security issues

Prepare draft responses to security questionnaires received in Gmail using approved answers and policies. Fill a copy in the original spreadsheet layout, flag uncertain questions, and save a reply draft for security review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing a first draft of a prospect's security questionnaire
• Filling SIG, CAIQ, or custom spreadsheets with approved answers
• Identifying questions that need security team input

Guide secret synchronization between Infisical and a local encrypted vault, a store for sensitive values such as API keys. Covers authentication, reading and updating secrets, change tracking, and troubleshooting without exposing values in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Pulling Infisical secrets into a local encrypted vault
• Creating or updating secrets from local values
• Troubleshooting authentication and permission errors