본문으로 건너뛰기
cccskills

'authorization' 검색 결과

523건 · 관련도순

Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Implement authorization with PKCE for web and mobile apps
  • Configure authorization for service-to-service communication
  • Review token storage, renewal, and revocation
mukul975/Anthropic-Cybersecurity-Skills3.5만2026년 8월 31일 업데이트

Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

andycungkrinx91/konoha92026년 10월 19일 업데이트

Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

micsapp/micstec-skills42026년 3월 20일 업데이트

Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

aniket2348823/Vul-Agent22026년 6월 9일 업데이트

Test REST, GraphQL, and gRPC APIs with Strix using schemas, credentials, and example data. Investigate authorization flaws, excessive data exposure, and other API risks, then verify findings with requests that reproduce the issue.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Testing an API from its specification
  • Checking data access across tenants
  • Verifying restrictions on administrator routes
usestrix/strix7만2026년 10월 18일 업데이트

Test whether API users can read or change fields beyond their permissions. Examine responses for sensitive data, inject extra request fields to check unauthorized updates, and use explicit lists of allowed fields to guide fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Check API responses for excessive sensitive data
  • Test whether added request fields allow unauthorized updates
  • Compare field access across user privilege levels
mukul975/Anthropic-Cybersecurity-Skills3.5만2026년 8월 31일 업데이트

Compare local case files with insurer policies to prepare a concise prior authorization packet, covering approval requirements, referrals, missing information, and a checklist for staff reviewing the case and communicating with the patient.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Check prior authorization requirements for a case
  • Review referral status and imaging policies
  • List missing information for human review
openai/openai-agents-python3만2026년 10월 18일 업데이트

Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i). Covers IRB and Privacy Board waivers of authorization, individual authorization for research, limited data set and data use agreements, preparatory to research provisions, and decedent research provisions. Keywords: HIPAA research, IRB waiver, Privacy Board, authorization, limited data set, preparatory research, de-identification, Common Rule.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

mukul975/Privacy-Data-Protection-Skills3132026년 3월 17일 업데이트

Implements permission-based authorization with custom attributes, policy providers, and authorization handlers. Provides granular access control beyond simple role-based authorization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

ronnythedev/dotnet-clean-architecture-skills762026년 7월 14일 업데이트

Implement iOS authentication patterns including Sign in with Apple (ASAuthorizationAppleIDProvider, ASAuthorizationController, ASAuthorizationAppleIDCredential), credential state checking, identity token validation, ASWebAuthenticationSession for OAuth and third-party auth flows, ASAuthorizationPasswordProvider for AutoFill credential suggestions, and biometric authentication with LAContext. Use when implementing Sign in with Apple, handling Apple ID credentials, building OAuth login flows, integrating Password AutoFill, checking credential revocation state, or validating identity tokens server-side.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

JordanCoin/ios-skills-collection62026년 9월 10일 업데이트

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them. The tester identifies admin and privileged endpoints, then attempts to access them with regular user credentials by manipulating HTTP methods, URL paths, and request parameters. Maps to OWASP API5:2023 Broken Function Level Authorization. Activates for requests involving BFLA testing, admin endpoint bypas...

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

MustafaKemal0146/fetih52026년 10월 11일 업데이트

Add authorization methods for a new entity to AuthorizationService. Use after creating a resource service. Triggers on "add permissions", "authorization methods", "entity permissions", "add auth methods".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

aibot88/sec_skill_store52026년 5월 27일 업데이트

Implements permission-based authorization with custom attributes, policy providers, and authorization handlers. Provides granular access control beyond simple role-based authorization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

aibot88/sec_skill_store52026년 5월 27일 업데이트

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them. The tester identifies admin and privileged endpoints, then attempts to access them with regular user credentials by manipulating HTTP methods, URL paths, and request parameters. Maps to OWASP API5:2023 Broken Function Level Authorization. Activates for requests involving BFLA testing, admin endpoint bypass, function-level access control testing, or API privilege escalation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

aniket2348823/Vul-Agent22026년 6월 9일 업데이트

Connect a remote Hermes gateway to MCP servers that require OAuth, a browser-based authorization process. The skill covers dashboard access, manual token setup when needed, and diagnosis of expired tokens or revoked sessions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Connect a remote Hermes gateway to an OAuth MCP server
  • Resolve localhost callback failures during authorization
  • Set up manual authorization without an interactive terminal
NousResearch/hermes-agent25.5만2026년 10월 18일 업데이트

Prepare a selected batch of pull requests, or proposed code changes, by reviewing overlaps, diagnosing conflicts, and preserving contributor credit. Check the exact version and required authorization before each merge, then report completed work and remaining holds.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Prepare a selected batch of pull requests
  • Investigate conflicts between proposed changes
  • Check validation and authorization before merging
diegosouzapw/OmniRoute7.8만2026년 10월 18일 업데이트

Review source code with Strix to trace data flow and authorization checks, then test suspected vulnerabilities in a running environment. Receive proven findings with exploit examples and code locations, while keeping unconfirmed observations clearly identified.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Reviewing a repository for security vulnerabilities
  • Checking authorization logic in a specific service
  • Reviewing security risks introduced by a branch
usestrix/strix7만2026년 10월 18일 업데이트

Create detection rules and investigation queries from API access logs to flag repeated identifier probing and unusual authorization responses. Helps investigate attempts to access other users’ data and review logging and rate limits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Investigating suspected unauthorized API data access
  • Creating detection rules for repeated identifier probing
  • Reviewing API logging and rate limits
mukul975/Anthropic-Cybersecurity-Skills3.5만2026년 8월 31일 업데이트

Deploy a Software-Defined Perimeter that connects verified users to authorized applications. Configure single-packet authorization, mutual certificate authentication, access policies, and monitoring, then test whether unauthorized connections and access between applications are blocked.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Building zero trust access to internal applications
  • Hiding services from unauthenticated network scans
  • Testing certificate authentication and access restrictions
mukul975/Anthropic-Cybersecurity-Skills3.5만2026년 8월 31일 업데이트

Plan and configure security across Google Kubernetes Engine clusters. Review access permissions, enable Secret Manager integration, and configure protections such as Shielded Nodes and Binary Authorization to strengthen the platform supporting your applications.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Review cluster access permissions
  • Enable Secret Manager integration
  • Configure Shielded Nodes and GKE Sandbox
google/skills2.1만2026년 10월 17일 업데이트

Design authentication and access permissions for web apps, mobile apps, and backend services using OAuth 2.0 and OpenID Connect. Get guidance on authorization flows, token validation, secure storage, renewal, and revocation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Add login to a web or mobile app
  • Review token storage and renewal
  • Design access permissions between services
RightNow-AI/openfang1.8만2026년 7월 2일 업데이트

Set up and authenticate lark-cli, choose between user and bot identities, and resolve missing permissions. The skill also guides authorization links, JSON result checks, update notices, and confirmation steps for high-risk operations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Set up lark-cli and sign in
  • Choose between user and bot access
  • Resolve missing permissions or revoke authorization
larksuite/cli1.8만2026년 10월 16일 업데이트

IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

yaklang/hack-skills2.5천2026년 9월 13일 업데이트

API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields, or weak function-level authorization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

yaklang/hack-skills2.5천2026년 9월 13일 업데이트