007
무료Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트
무료GitHub에 공개
1password-credential-lookup
This skill should be used when agents need to log into websites, retrieve passwords, or access credentials. CRITICAL - always use find_credential with the website URL, never guess item names.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
연동 도구X (Twitter)
설치 방법 보기포함된 파일(2)
- SKILL.md3.0 KB
- source.json754 B
SKILL.md(원문)
설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.
1Password Credential Lookup
CRITICAL: Use URL, Not Item Names
WRONG:
get_credential(item_name="github.com") ← NEVER DO THIS
get_credential(item_name="GitHub") ← NEVER DO THIS
RIGHT:
find_credential(url="github.com") ← CORRECT
find_credential(url="github.com", username="clementwalter") ← EVEN BETTER
The One Rule
When logging into a website, use find_credential with the domain.
1Password items have arbitrary names that don't match URLs. The find_credential tool searches by the URL field stored in 1Password, which matches the website you're visiting.
Tools (in order of preference)
1. find_credential - PRIMARY TOOL
Use this for ALL credential lookups:
find_credential(url="github.com")
find_credential(url="linkedin.com", username="clement@example.com")
Parameters:
url(required): Domain of website (e.g., "github.com", "twitter.com")username(optional): Filter by username when multiple accounts exist
Returns:
- Single match:
{"username": "...", "password": "...", "item_name": "..."} - Multiple matches: List of accounts to choose from
- No match: Error message
2. list_items_for_url - When unsure which account
list_items_for_url(url="github.com")
Shows all accounts for a domain with usernames. Use before find_credential if you don't know which account to use.
3. get_credential - RARELY NEEDED
Only use if you have an exact item ID (like ct2jszznlzlp7r7jeb53rhy5li). Never pass URLs or guessed names.
Workflow Example
When logging into github.com:
# Step 1: Get credentials for the domain
find_credential(url="github.com", username="clementwalter")
# If multiple accounts and no username filter:
# → Returns list: [{"username": "work@company.com"}, {"username": "personal@gmail.com"}]
# → Pick one and retry with username filter
# Step 2: Use returned credentials to fill login form
Domain Aliases
These domains are treated as equivalent:
x.com↔twitter.com
Error Handling
| Error | Solution |
|---|---|
| "No items found" | Check domain spelling |
| "Multiple items found" | Add username parameter to filter |
| "op CLI not installed" | User needs 1Password CLI |
| "Timed out" | User needs to run op signin |
Anti-Patterns
NEVER do these:
get_credential(item_name="github.com")- URL is not an item nameget_credential(item_name="GitHub")- Guessed names don't workget_credential(item_name="my github")- Item names are arbitrary
ALWAYS do this:
find_credential(url="github.com")- Search by the website URL
리뷰
아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.
댓글
로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.
아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.
같은 저장소의 스킬
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트
10x-team
무료You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
aibot88/sec_skill_store52026년 5월 27일 업데이트