'scanning' 검색 결과

Scan code, configuration files, and Git history for exposed AWS credentials with TruffleHog. Checks whether detected keys remain active and guides key replacement, incident investigation, and automated checks before commits and during CI/CD.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing Git history for exposed AWS keys
• Adding credential checks before commits and in CI/CD
• Investigating credential exposure after a GuardDuty alert

Deploy a Software-Defined Perimeter that connects verified users to authorized applications. Configure single-packet authorization, mutual certificate authentication, access policies, and monitoring, then test whether unauthorized connections and access between applications are blocked.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building zero trust access to internal applications
• Hiding services from unauthenticated network scans
• Testing certificate authentication and access restrictions

Assess authorized networks through host discovery, service checks, vulnerability identification, and controlled exploitation. Follow a structured testing process to document attack paths, demonstrate business impact, clean up test artifacts, and prioritize remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing internal or external network security
• Validating firewall rules and network segmentation
• Verifying whether service vulnerabilities are exploitable

Analyze a software bill of materials, an inventory of software components, against known vulnerability records. Trace indirect dependencies, assess risk, and produce reports that help teams prioritize fixes and review supplier software.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing vulnerabilities in vendor-provided software inventories
• Checking whether a newly disclosed CVE affects deployed software
• Adding SBOM vulnerability checks to CI/CD

Audit MCP servers, which provide external tools to AI agents, for hidden instructions, changes after approval, unsafe internal requests, and missing authentication. Use mcp-scan and manual checks to document risks and recommended fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing an MCP server before adding it to an agent
• Auditing an internally developed MCP server
• Checking approved tools for unexpected changes

Analyze Windows PowerShell event logs to reconstruct scripts split across records and identify encoded commands, suspicious downloads, and security scanning bypass attempts. Produce a report with recovered scripts, risk scores, and mappings to documented attack techniques.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating suspicious PowerShell activity
• Reconstructing scripts split across log records
• Finding encoded commands and suspicious downloads

Analyze access logs from AWS API Gateway, Kong, and Nginx with pandas, a Python data analysis library. Examine resource access patterns, authentication failures, and suspicious requests to investigate API abuse and inform detection rules.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating sequential access to resource IDs
• Examining spikes in authentication failures
• Checking for rate limit bypass and injection attempts

Investigate suspicious URLs with URLScan.io by reviewing screenshots, redirects, page content, and network requests. Extract domains, IP addresses, and file hashes as indicators of compromise, then compare findings with threat intelligence sources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating suspicious links in emails
• Checking pages for brand impersonation and credential forms
• Tracing redirects and extracting domains, IPs, and hashes

Investigate Linux kernel rootkits, malware that hides inside the operating system's core. Analyze memory dumps with Volatility3, compare system views, and run live scans to identify hidden modules, altered calls, and suspicious inconsistencies.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate suspected Linux rootkit infections
• Find hidden kernel modules in memory dumps
• Compare module lists for signs of concealment

Prepare accountant review materials from closed books: US quarterly estimated tax calculations or year-end contractor payment lists. The output records assumptions, flags missing W-9 forms containing taxpayer details, and highlights payment processor records that need review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing quarterly estimates from closed books
• Compiling contractor payment lists for 1099 preparation
• Finding missing W-9 forms and taxpayer details

Audit web applications for accessibility issues against WCAG 2.2 Level A and AA, the web accessibility standards. Get framework-specific code fixes, contrast checks, verification steps, and reports, with options for automated checks in development pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit a web application before release
• Fix contrast and keyboard navigation issues
• Prepare accessibility reports for stakeholders

Check AI agent skills before installation by inspecting code, instructions, dependencies, and file access without running the code. Receive a PASS, WARN, or FAIL verdict with findings ranked by severity and suggested fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking an unfamiliar skill before installation
• Finding suspicious instructions in SKILL.md
• Reviewing scripts for credential theft or data leaks

Identify security threats across system components and data flows, score their risks, and prioritize mitigations. Run a quick scan for exposed credentials and route requests beyond threat modeling to the appropriate specialist skills.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing threats in a new system design
• Prioritizing risks and assigning mitigation owners
• Scanning code for exposed credentials

Assess security risks in AI systems by scanning prompts for known attack patterns and scoring data exposure, poisoning, and tool abuse risks. Map findings to MITRE ATLAS, an AI threat framework, and identify protective controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Scan application prompts for injection and jailbreak patterns
• Review malicious instructions in retrieved documents
• Assess training data exposure and poisoning risks

Adapt Airflow workflow definitions for newer versions in Google Cloud's managed service. The skill guides checks for incompatible code and dependencies, explains required changes, and supports requested deployment and verification for Airflow 2.11.1 or Airflow 3.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Migrate workflow definitions to Airflow 2.11.1
• Review code changes needed for Airflow 3
• Replace removed operators and outdated dependencies

Review agent skills for risky behavior, excessive permissions, and hidden data sharing. It combines static scanning, which checks known risk patterns without running code, with source review to produce an evidence-based installation verdict.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing a skill before installation
• Checking permissions in an installed skill
• Investigating credential access or external data sharing

Clean up stale PUA agent state from Codex CLI using the equivalent of Claude Code's /pua:reap-orphans command. It removes only records confirmed to be orphaned, meaning no longer associated with an active agent, and reports evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Scanning stale PUA agent state
• Removing only confirmed orphan records
• Reviewing evidence from agent state cleanup

Inspect Mac performance to find processes using excessive CPU, GPU, memory, or energy. Combine measurements with explanations of known system processes to diagnose slowness, heat, and startup load, then recommend actions without changing system settings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Find the cause of a slow Mac
• Investigate loud fans and overheating
• Check memory pressure and swap activity

Document how a research or coding session evolved after the work is complete. The skill extracts decisions, experiments, failed approaches, and claims into ara/ files, distinguishing user statements from AI suggestions and actions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Record the reasons behind research decisions
• Preserve failed experiments and their lessons
• Distinguish user decisions from AI suggestions

Review code and infrastructure for vulnerabilities, insecure dependencies, and exposed credentials. Combine automated scans with manual review to produce audit reports that identify affected locations, rate severity, and prioritize practical fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing code for security vulnerabilities
• Checking dependencies and exposed credentials
• Auditing cloud and infrastructure security

Assess a website’s readiness for AI search alongside traditional SEO. Review content citation readiness, crawler access, brand mentions, technical foundations, and structured data, then generate scores, prioritized recommendations, and client reports.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit a website’s readiness for AI search
• Assess a page’s suitability for AI citation
• Check AI crawler access and generate llms.txt

Run an AI vulnerability scan on uncommitted changes, changes against main, or an entire codebase. Filter candidate files, investigate potential security issues, and review findings with severity ratings, with options to revalidate and export results.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking uncommitted changes for vulnerabilities
• Reviewing security issues in changes against main
• Scanning an existing codebase

Assess weaknesses in the software supply chain, from dependency packages to build pipelines and distributed artifacts. Covers authorized proof-of-concept testing, package confusion, container image risks, signing abuse, and defensive checks for tampering.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess dependency confusion risks in package registry settings
• Review tampering risks in CI/CD artifacts and container images
• Plan a non-destructive proof of concept and remediation report

Audit TLS/SSL, the technology that encrypts network connections, across servers and mobile apps. The skill covers outdated protocols, weak encryption, certificate validation failures, known vulnerabilities, and replay risks, helping organize evidence and prioritize fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing server protocols, encryption settings, and certificates
• Reviewing certificate validation in mobile apps
• Assessing TLS 1.3 replay risks and mutual authentication