267건 · 관련도순
Assess an application against OWASP Top 10:2025 risk categories using Strix. Get findings backed by working exploit examples, organized by category, with clear explanations of what was tested and what remains unassessed.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Review how an AI agent loads, retains, summarizes, and shares working information. This historical guide helps examine forgotten constraints, repeated actions, tool selection, and handoffs using context engineering practices published in 2024–2025.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
AI 短剧 (AI 微短剧) (AI 短剧 (AI 微短剧) (从业者视角) — 用 AIGC 工具（AI 视频生成 / AI 脚本 / AI 生图 / AI 配音 / 对口型 / 角色一致性）制作竖屏微短剧并变现的新兴行业。覆盖: (a) 创作工作流 — 选题→剧本/分镜→AI 生图→图生视频(首尾帧/运镜/参考)→配音/对口型→剪辑/调色→成片，其中角色/场景一致性是第一性难题; (b) 工具栈 — 视频生成(可灵 Kling / 即梦 Seedance / 海螺 Hailuo / Vidu / Runway Gen / OpenAI Sora / Pika / Luma / Pixverse)、脚本(LLM)、生图(Midjourney/SD/即梦)、配音(TTS)、对口型、剪辑(剪映/CapCut); (c) 商业/变现 — 国内付费投流(IAP + ROI + 平台分账, 抖音/快手/红果/微信小程序短剧)与海外订阅(ReelShort/DramaBox/ShortMax/GoodShort)两套打法、品牌定制、成本结构; (d) 合规 — 中国《人工智能生成合成内容标识办法》(2025-09 强制 AI 标识)、广电微短剧备案与分类分层审核、版权与肖像权。主战场 = 抖音/快手/视频号/B站 + 海外短剧 App。学派分歧: 纯 AI vs AI+实拍混合、国内投流 vs 海外订阅、视频工具派之争、「AI 短剧是真需求还是伪风口」。不含: 传统实拍短剧制作、通用影视编剧(已有 scriptwriting skill)、短视频信息流投放(已有 short-video-ads skill)、纯 AI 视频底层技术研发。) Master OS — automated mastery of AI 短剧 (AI 微短剧) (从业者视角) — 用 AIGC 工具（AI 视频生成 / AI 脚本 / AI 生图 / AI 配音 / 对口型 / 角色一致性）制作竖屏微短剧并变现的新兴行业。覆盖: (a) 创作工作流 — 选题→剧本/分镜→AI 生图→图生视频(首尾帧/运镜/参考)→配音/对口型→剪辑/调色→成片，其中角色/场景一致性是第一性难题; (b) 工具栈 — 视频生成(可灵 Kling / 即梦 Seedance / 海螺 Hailuo / Vidu / Runway Gen / OpenAI Sora / Pika / Luma / Pixverse)、脚本(LLM)、生图(Midjourney/SD/即梦)、配音(TTS)、对口型、剪辑(剪映/CapCut); (c) 商业/变现 — 国内付费投流(IAP + ROI + 平台分账, 抖音/快手/红果/微信小程序短剧)与海外订阅(ReelShort/DramaBox/ShortMax/GoodShort)两套打法、品牌定制、成本结构; (d) 合规 — 中国《人工智能生成合成内容标识办法》(2025-09 强制 AI 标识)、广电微短剧备案与分类分层审核、版权与肖像权。主战场 = 抖音/快手/视频号/B站 + 海外短剧 App。学派分歧: 纯 AI vs AI+实拍混合、国内投流 vs 海外订阅、视频工具派之争、「AI 短剧是真需求还是伪风口」。不含: 传统实拍短剧制作、通用影视编剧(已有 scriptwriting skill)、短视频信息流投放(已有 short-video-ads skill)、纯 AI 视频底层技术研发。: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on AI 短剧 (AI 微短剧) (从业者视角) — 用 AIGC 工具（AI 视频生成 / AI 脚本 / AI 生图 / AI 配音 / 对口型 / 角色一致性）制作竖屏微短剧并变现的新兴行业。覆盖: (a) 创作工作流 — 选题→剧本/分镜→AI 生图→图生视频(首尾帧/运镜/参考)→配音/对口型→剪辑/调色→成片，其中角色/场景一致性是第一性难题; (b) 工具栈 — 视频生成(可灵 Kling / 即梦 Seedance / 海螺 Hailuo / Vidu / Runway Gen / OpenAI Sora / Pika / Luma / Pixverse)、脚本(LLM)、生图(Midjourney/SD/即梦)、配音(TTS)、对口型、剪辑(剪映/CapCut); (c) 商业/变现 — 国内付费投流(IAP + ROI + 平台分账, 抖音/快手/红果/微信小程序短剧)与海外订阅(ReelShort/DramaBox/ShortMax/GoodShort)两套打法、品牌定制、成本结构; (d) 合规 — 中国《人工智能生成合成内容标识办法》(2025-09 强制 AI 标识)、广电微短剧备案与分类分层审核、版权与肖像权。主战场 = 抖音/快手/视频号/B站 + 海外短剧 App。学派分歧: 纯 AI vs AI+实拍混合、国内投流 vs 海外订阅、视频工具派之争、「AI 短剧是真需求还是伪风口」。不含: 传统实拍短剧制作、通用影视编剧(已有 scriptwriting skill)、短视频信息流投放(已有 short-video-ads skill)、纯 AI 视频底层技术研发。 problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词：「ai 短剧」「ai 微短剧」「ai short drama」「ai 短剧制作」「ai 短剧工作流」
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Linux local privilege escalation from a low-privilege shell to root. Covers quiet vs loud enumeration, sudo/GTFOBins, CVE-2025-32463 chwoot and CVE-2025-32462 host bypass, polkit/udisks CVE-2025-6018/6019, SUID/capabilities, systemd timers/units, cron/PATH/LD_PRELOAD, dangerous groups and docker.sock, host-local container escape, and version-gated kernel LPE including Copy Fail CVE-2026-31431. Use when the operator has a Linux foothold and needs root. Kubernetes RBAC stays in /k8s. Endpoint blocks hand off to /edr-bypass then return here.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Build draft structures and aggregate tables for clinical case, trial, diagnostic, and safety reports from verified synthetic, de-identified, or aggregate data. Local checks flag structural and consistency issues; qualified professional review remains required.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Review an AI system's EU AI Act readiness through six structured questions. Produce an article-cited assessment covering risk classification, conformity checks, organizational obligations, transparency, and general-purpose models, with gaps and three prioritized actions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Develop applications with the Claude API using examples from Anthropic's official cookbooks. Explore document summarization, image analysis, document retrieval, external tool calls, and prompt caching through practical Python code and implementation guidance.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Analyze company earnings from four perspectives: business performance, financial quality, competition, and risk. Combine the findings into a research report, then edit and review an accessible article for a WeChat official account.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Prepares statistical reports for clinical trials following CONSORT 2025, SPIRIT 2025, ICH E9(R1) estimands, and FDA 2023 covariate adjustment guidance. Covers Table 1 generation, analysis populations (ITT/FAS/PP/Safety), the 5 ICH E9(R1) intercurrent-event strategies, MMRM under MAR (mmrm), reference-based MI (rbmi J2R/CR/CIR), Permutt tipping-point sensitivity, and Rubin's-rules vs frequentist variance debate. Use when preparing regulatory submissions, defining estimands, or implementing missing-data sensitivity analyses.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Expert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when attacking an AI/ML system or model — prompt injection & jailbreaks (Crescendo, Skeleton Key, Best-of-N), RAG/vector poisoning, agentic/MCP exploitation (CVE-2025-54136), ML supply-chain RCE (pickle CVE-2025-32434), model extraction / membership inference / adversarial suffixes (GCG)
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when attacking a Windows Active Directory domain — Kerberos roasting/delegation, coercion + NTLM/Kerberos relay (CVE-2025-33073), ADCS ESC1-16 (EKUwu), ticket forgery & DCSync, dMSA BadSuccessor (CVE-2025-53779), BloodHound attack-path enumeration, domain dominance
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when crossing a Windows security boundary or escaping a sandbox — kernel/user crossing (win32k/dxgkrnl UAF CVE-2025-24983), BYOVD kernel R/W, UAC/COM elevation, AppContainer/LPAC & Chromium-Mojo sandbox escape (CVE-2025-2783), PPL bypass, RPC/ALPC & named-pipe impersonation
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Spark Studio's team-culture Relic — a 5-person AI product startup that existed 2022–2025: roast first then work, hotpot on Fridays, used Feishu while cursing Feishu daily, requirements always changing but versions always shipping. 星火工作室（Spark Studio）的团队文化 Relic。一个 2022-2025 年间存在过的 5 人 AI 产品创业团队： 先吐槽再开工，周五点海底捞，用飞书但天天骂飞书，需求总在变但总能把版本扛上线。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Mimi's pet Relic — a 14-jin orange tabby who lived 12 years and passed in 2025. Aloof by day, face-rubbing at midnight; drinks only running water, obsessed with the crinkle of plastic bags; loves parking on keyboards, waits at the door at fixed hours, shows her belly to her person only. 咪咪（Mimi）的宠物 Relic。她是一只14斤的橘猫，活了12年，于2025年离开。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ALIFE 2025 Proceedings - 337 pages, 80+ papers on artificial life, evolution, emergence, cellular automata, neural networks, agent-based models. Full Mathpix extraction with equations and figures.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Salesforce Agentforce AI agents and autonomous automation (2025)
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Multi-backend database security auditor. Audits Supabase, Firebase (Firestore/RTDB/Storage/Functions/Remote Config), MongoDB (self-hosted + Atlas), self-hosted PostgreSQL, and self-hosted MySQL for RLS/rules misconfigurations, exposed credentials, auth bypasses, MongoBleed (CVE-2025-14847), pgBouncer CVE-2025-12819, mysql_native_password drift, ghost auth, and storage exposures. Use this skill whenever the user mentions database security, RLS or rule audits, security review, penetration testing a vibe-coded app, checking if their DB is exposed, hardening a backend, fixing security rules, or auditing apps built with Lovable/Bolt/Replit/Cursor/Claude Code on any of these backends. Trigger on phrases like 'is my app secure', 'check my database', 'audit my Firebase', 'audit my MongoDB', 'audit my Postgres', 'audit my Supabase', 'is my DB exposed', or any cross-backend variant ('audit my full stack').
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
AI/LLM red-team assessment using the OWASP LLM Top 10 (2025) + OWASP AI Testing Guide (AITG v1, Nov 2025) frameworks, plus OWASP MCP Top 10 runtime testing for agentic/MCP targets. Tests prompt injection, jailbreaks, system prompt leakage, sensitive data extraction, excessive agency, improper output handling, model extraction, content bias, evasion, membership inference, MCP token exposure, MCP command injection, and more. Uses four tools in combination: FuzzyAI (single-turn jailbreak fuzzing), PyRIT (multi-turn orchestrated attacks), Garak (probe-based vulnerability scanning), and promptfoo (plugin-based red-team evaluation). Each tool covers different OWASP categories; running them together gives systematic coverage. Includes a conditional MCP reconnaissance phase and a post-access AI infrastructure phase (chained from /post-exploit). Produces: OWASP LLM Top 10 + AITG + MCP coverage matrix, findings per category, architecture diagram of the AI system, PoCs for confirmed exploits. Chains into /gh-export for issue filing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
AI-powered bank compliance and regulatory review assistant - screen marketing materials, KYC documents, AML alerts, and NFRA/CBIRC compliance checks. Updated for 2025-2026 regulations including 商业银行资本管理办法 (Basel III China 2024), 消费者权益保护规定升级, FATF mutual evaluation 2025, and 反洗钱法修订. Keywords: bank compliance, KYC, AML, regulatory review, NFRA, Basel III, China banking, 合规审查, 合规审核, 监管合规, 反洗钱, KYC尽调, 客户身份识别, 受益人识别, 制裁筛查, 交易监控.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
State-of-the-art data visualization for React/Next.js/TypeScript with Tailwind CSS. Creates compelling, tested, and accessible visualizations following Tufte principles and NYT Graphics standards. Activate on "data viz", "chart", "graph", "visualization", "dashboard", "plot", "Recharts", "Nivo", "D3". NOT for static images, print graphics, or basic HTML tables.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Prepares statistical reports for clinical trials following CONSORT 2025, SPIRIT 2025, ICH E9(R1) estimands, and FDA 2023 covariate adjustment guidance. Covers Table 1 generation, analysis populations (ITT/FAS/PP/Safety), the 5 ICH E9(R1) intercurrent-event strategies, MMRM under MAR (mmrm), reference-based MI (rbmi J2R/CR/CIR), Permutt tipping-point sensitivity, and Rubin's-rules vs frequentist variance debate. Use when preparing regulatory submissions, defining estimands, or implementing missing-data sensitivity analyses.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.