'secrets' 검색 결과

1Password에 저장한 비밀번호와 API 키를 명령과 설정 템플릿에 사용합니다. CLI 설치와 인증부터 비밀 값 조회 및 환경 변수 전달까지 안내합니다.

• 1Password CLI 설치와 설정
• 저장된 API 키로 명령 실행
• 설정 템플릿에 비밀 값 삽입

OpenClaw의 기억, 페르소나 설정, 스킬과 호환 설정을 Hermes로 옮깁니다. 사전 미리보기로 충돌을 확인하고 이전하거나 건너뛴 항목과 이유를 보고합니다.

• 기억과 페르소나를 Hermes로 이전
• 기존 OpenClaw 스킬 가져오기
• 이전 전 충돌 확인

Review a Homecore server operation plan before startup. Check authentication, restoration order, feature tests, speech provider configuration, and handling of pairing secrets. The skill reviews the plan without starting the server.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review a Homecore server startup plan
• Check restoration order and bounded limits
• Verify feature tests before enabling Wasmtime or HAP

Review page source, browser JavaScript, and Git history for exposed API keys, passwords, and tokens. Identify potential leaks and guide fixes, including moving secrets to the server, replacing compromised credentials, and adding checks before commits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking browser code for exposed API keys
• Finding credentials committed to Git
• Moving secret-dependent API calls to the server

Analyze running containers in a CTF sandbox by comparing declared configuration with live processes, mounts, and routes. Trace how secrets and helper containers affect behavior, then document the earliest mismatch and a minimal evidence chain.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Comparing container manifests with live runtime behavior
• Identifying which process consumes a mounted secret
• Tracing changes made by sidecars or init containers

Generate Kubernetes YAML files that define how applications run, connect, receive configuration, and use persistent storage. Include resource limits, health checks, security settings, labels, and validation guidance for production-oriented deployments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating Deployment and Service manifests
• Separating configuration with ConfigMaps and Secrets
• Defining persistent storage for applications

Review MCP configurations for exposed credentials, risky command patterns, and package versions that can change unexpectedly. Produce a report with severity levels and suggested fixes without running the commands defined in the configuration.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing .mcp.json before committing changes
• Checking a new MCP server before adoption
• Finding hardcoded credentials in configurations

Ask plain-language questions about AWS resources, settings, and costs, and receive readable tables using read-only AWS CLI commands. Inspect services and filter results by region, state, or tags without creating, changing, or deleting resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Listing running EC2 instances
• Checking S3 encryption and public access settings
• Finding unattached EBS volumes

Create, review, migrate, or troubleshoot Azure Developer CLI projects. Align application settings, infrastructure definitions, deployment environments, secrets, and automated delivery workflows while checking that configuration files and deployment requirements agree.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating an Azure Developer CLI project structure
• Reviewing azure.yaml against Bicep or Terraform definitions
• Organizing environment settings and secret handling

Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing GitHub Actions workflow security
• Checking action version pinning
• Finding unsafe event expressions in scripts

Investigate DCSync attacks, which abuse Active Directory replication to steal password hashes. Use audit events and network traffic to identify suspicious replication requests, examine their sources, and check for subsequent credential misuse.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Hunting for credential theft in Active Directory
• Investigating suspected Mimikatz or Impacket use
• Auditing accounts with directory replication permissions

Assess exposure of Windows secrets protected by DPAPI, the operating system’s data protection service, during authorized security tests. Guide examination and decryption of saved credentials and browser data using available user sessions, credentials, or backup keys.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing saved credential exposure in authorized tests
• Examining collected DPAPI files offline
• Reviewing protected browser and RDP credentials

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Define the documentation needed to review and hand over an AI-built app. Map architecture, permissions, configuration, secrets, and test coverage, adding relevant operational documents so reviewers can compare intended behavior with implementation and identify verification gaps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing documentation for an app handoff
• Mapping user flows and permission checks
• Separating existing tests, proposed tests, and coverage gaps

Audit and strengthen security for applications running on GKE. Configure pod traffic restrictions, sandbox isolation, namespace security standards, and Secret Manager volume mounts to protect workloads at the application and namespace level.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing GKE security settings
• Restricting communication within a namespace
• Isolating risky pods and applying security standards

Review source code, dependencies, and infrastructure settings for security issues. Find exposed credentials, unsafe input handling, and access control gaps, then organize findings into a report with severity levels, affected locations, and recommended fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review code security before deployment
• Find API keys and passwords embedded in files
• Check dependencies for known vulnerabilities

Request a new API key or login through a single-use, expiring link. The submitted credential is encrypted and saved to the person's keychain, keeping secrets out of chat and making them available to the task.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Collecting an API key that has not been saved
• Requesting an email and password through a form
• Creating a credential submission link for a teammate

Audit C/C++ and Rust code for secrets left in memory. It checks missing or incomplete wipes, examines compiler output for removed cleanup operations, and produces reports with evidence and suggested fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing cryptographic key cleanup
• Checking password and token memory wipes
• Investigating cleanup removed by compiler optimization

Assess AWS, Azure, and GCP environments by identifying identities, permissions, and paths to broader access or data exposure. Covers cloud storage, secrets, cross-account trust, and CI/CD, the automated systems used to build and deploy software.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning an AWS, Azure, or GCP security assessment
• Tracing privilege escalation from current permissions
• Reviewing CI/CD credentials and OIDC trust settings

Plan security testing for IoT and embedded devices, from circuit board inspection and firmware analysis to wireless links, companion apps, and cloud APIs. Includes tools, investigation checklists, and guidance for documenting findings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning smart home device security tests
• Analyzing firmware for embedded secrets
• Assessing industrial device communications

Guides security testing of Android and iOS apps through file inspection and observation while the app runs. Covers network traffic, stored secrets, external app interfaces, authentication, and backend APIs, with tool examples and a testing checklist.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspecting APK or IPA files for endpoints and embedded secrets
• Observing app behavior and traffic with Frida
• Reviewing deep links and externally accessible components

Develop and deploy Cloudflare Workers, manage related storage and services, and troubleshoot configuration with Wrangler. The skill checks official documentation and configuration definitions before preparing commands, with guidance for local development, environments, secrets, and logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Develop and deploy a Cloudflare Worker
• Configure KV, R2, and D1 resources
• Separate staging and production settings

Deploy n8n on a Linux server using Docker Compose and Caddy for automatic HTTPS. Choose a single instance or queue workers, configure secrets and Python task runners, and follow procedures for updates, backups, and recovery.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploy n8n on a personal VPS with HTTPS
• Set up queue workers for parallel workflow execution
• Update, back up, or restore an n8n instance

Plan and configure Kubernetes deployments, Git-based continuous delivery, and cloud resources defined in code. Covers Helm, Kustomize, ArgoCD, Flux, Terraform, Pulumi, and AWS CDK, with patterns for environment separation, secrets, validation, updates, and rollback.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create Helm charts and environment-specific configurations
• Set up Git-based delivery with ArgoCD or Flux
• Organize cloud resources with Terraform or Pulumi