'sec' 검색 결과

Load API keys, tokens, and other secrets from Infisical into a shell or a specific command. The skill covers finding secret names, checking availability, and passing values to commands without displaying or logging them.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Loading a missing API key before running a command
• Passing secrets only to the process that needs them
• Checking secret names and availability without displaying values

Helps address Google Cloud Security Command Center findings by planning targeted fixes for permissions, misconfigurations, vulnerabilities, and combined attack paths. It includes impact checks, verification, rollback steps, and execution after user approval.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Fix excessive permissions flagged by Security Command Center
• Plan fixes for exposed buckets or firewall rules
• Address attack paths involving multiple security issues

Prepare draft responses to security questionnaires received in Gmail using approved answers and policies. Fill a copy in the original spreadsheet layout, flag uncertain questions, and save a reply draft for security review.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Preparing a first draft of a prospect's security questionnaire
• Filling SIG, CAIQ, or custom spreadsheets with approved answers
• Identifying questions that need security team input

Guide secret synchronization between Infisical and a local encrypted vault, a store for sensitive values such as API keys. Covers authentication, reading and updating secrets, change tracking, and troubleshooting without exposing values in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Pulling Infisical secrets into a local encrypted vault
• Creating or updating secrets from local values
• Troubleshooting authentication and permission errors

Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing login with password hashing and rate limits
• Adding JWT validation and session protection
• Preventing SQL injection and malicious script execution

Evaluate supplied security findings against repository code and security policy without running the software. Classify each claim as confirmed, not actionable, or needing review, then rank relevant findings by exploitability and explain evidence gaps and next steps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess findings from a vulnerability scanner
• Review security tickets from Jira or Linear
• Evaluate GitHub alerts and security advisories

Review code or changes for exposed secrets, injection risks, weak encryption, and missing permission checks. Produce a structured report with severity, location, recommendations, and confidence, with a separate reviewer checking findings for false positives.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing a module for security issues
• Checking changes for exposed secrets
• Preparing a vulnerability report with evidence

Check the health of the HashiCorp Vault instance in an OpenRig environment and manage stored secrets. Use its API to write, read, list, or delete entries and explain how secret paths are organized.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking whether the local Vault instance is healthy
• Storing or retrieving secret values
• Listing secret paths and explaining their contents

Turn a Mermaid sequence diagram of a cryptographic protocol into a ProVerif model, a file for formal security checks. It includes queries for secrecy, authentication, replay resistance, and forward secrecy where applicable.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Converting a cryptographic protocol diagram into a .pv file
• Preparing session key secrecy checks
• Modeling authentication and replay resistance

Scan code for security risks such as injection attacks and embedded secrets, then report findings by severity. Also check whether design documents record security decisions, trust boundaries, and accepted risks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Security checks before committing code
• Reviewing authentication and authorization changes
• Finding embedded keys and secrets

Add AI chat, text generation, and agents to applications using AI SDK. The skill checks documentation and source code to guide streaming replies, external tool calls, structured results, React integration, and fixes for outdated API usage.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Add AI chat to an application
• Build an agent that calls external tools
• Build answers using retrieved documents

Create an interactive bash script that guides people through manual setup or migration tasks. It opens relevant pages, explains each action, collects values, and saves settings to .env files or GitHub secrets with confirmation steps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Guide someone through an unfamiliar service dashboard
• Collect credentials and configure CI secrets
• Walk through a one-time migration or cutover

Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing security boundaries and potential threats
• Updating dependencies and checking audit results
• Revising password hashing and credential generation

Audit sensitive code and dependencies for security weaknesses, then verify fixes with tests and repeat checks. Reports identify severity, file locations, and remediation steps for issues involving authentication, data protection, injection attacks, and configuration.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing authentication and access controls
• Auditing payment processing code
• Checking dependencies for known vulnerabilities

Deploy and operate DOCA Argus Service on BlueField to monitor suspicious activity. This skill guides detection settings, forwarding findings to a security monitoring system, and troubleshooting missing alerts, excessive noise, or performance impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploying runtime security on BlueField
• Forwarding security findings to Splunk
• Investigating missing or excessive alerts

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing. Apply when writing, reviewing, or auditing Go code for security, or when touching crypto, file or network I/O, secrets, user input, or authentication. Not for non-exploitable defensive bugs such as nil panics or slice aliasing (→ See `samber/cc-skills-golang@golang-safety` skill), dependency vulnerability scanning with govulncheck (→ See `samber/cc-skills-golang@golang-dependency-management` skill), or wiring security scanners into CI pipelines (→ See `samber/cc-skills-golang@golang-continuous-integration` skill).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Azure Key Vault Secrets library for Rust. Store and retrieve secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust", "list secrets rust".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did the security scan find", remediating or triaging security risks, or wants to start fixing reported vulnerabilities — even if they don't name the service explicitly. Trigger it for phrases like "get my security findings", "what vulnerabilities do we have", "let's fix the pentest results", or "triage the security report". The skill discovers scans, exports findings to a gitignored local directory (so sensitive exploit detail is never committed), produces a prioritized triage summary, and offers to start fixing the highest-risk issues.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Apply Apollo.io API security best practices. Use when securing Apollo integrations, managing API keys, or implementing secure data handling. Trigger with phrases like "apollo security", "secure apollo api", "apollo api key security", "apollo data protection".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

How to handle `GRIDA-SEC-<id>` security boundaries in the Grida repo. Triggers when you encounter a `GRIDA-SEC` tag in source/docs, when modifying files under any tagged path, or when adding a new prevented- vulnerability record. Each `GRIDA-SEC-<id>` identifies a structural trust boundary documented in `/SECURITY.md`. This skill explains the contract, mandates a security review before committing changes to any tagged file, and shows how to register a new id. Use whenever "GRIDA-SEC" appears in context.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Store, retrieve, and pass credentials securely in MATLAB using the built-in MATLAB Vault (setSecret, getSecret, importSecrets, secretID) instead of hardcoding. Handles connections to any authenticated service: REST APIs, databases, cloud storage (S3/Azure/GCS), SFTP, and others. Covers API keys, tokens, passwords, SSH passphrases, CI/batch/scheduled jobs, and "keep credentials out of code" requests. Does NOT cover third-party secret managers (HashiCorp Vault, AWS Secrets Manager), OS-level key management, or the connection/query logic itself.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail). Also trigger for questions like "are we covered by TSA directives?", "what does the TSA require for pipeline cybersecurity?", "how do I build a CIP?", "what must I report to CISA?", or any request involving transportation critical infrastructure cybersecurity compliance.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance. Triggers on: ISM controls, ASD compliance, IRAP assessment, PROTECTED system scoping, Essential Eight vs ISM, system authorisation, NC/OS/ PROTECTED/SECRET/TOP SECRET classification markings, security objectives, ISM guidelines or chapters, control applicability markings, cybersecurity documentation for Australian government, the June 2026 ISM update, ISM AI application controls (ISM-2112/2113/2114), and any question about the ASD Information Security Manual framework or Australian government cybersecurity obligations.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.