“trust”的搜索结果

Review research ethics, participant protection, and potential bias from planning through publication. The skill examines questionable research practices and study trustworthiness, then produces a structured report with evidence, risk levels, and prioritized recommendations.

中文简介正在准备中。当前显示英语简介。

• Review consent documents before collecting data
• Screen analyses for questionable research practices
• Assess trustworthiness in qualitative research

Braintrust is a hosted platform for evaluating and tracing LLM applications: it runs a task over a dataset, scores the outputs, stores each run as an experiment and logs production traces. Use when a user asks to write or run a Braintrust eval, score LLM outputs with autoevals, compare prompt or model versions as experiments, run evals in CI and fail on regressions, trace OpenAI or Anthropic calls with Braintrust, manage evaluation datasets, or use the bt CLI.

中文简介正在准备中。当前显示原文说明。

AKF — The AI Native File Format workflow skill. Use this skill when the user needs The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

中文简介正在准备中。当前显示原文说明。

Use when the diff reads Host or X-Forwarded-* headers, configures trusted proxies, builds absolute URLs or response headers from input, sets cache headers or CDN/reverse-proxy cache rules, or changes an ingress, auth proxy or custom HTTP parser - host and forwarded-header trust, cache poisoning and deception, header injection, trusted-proxy bypass and request framing

中文简介正在准备中。当前显示原文说明。

Assess the scientific integrity and trustworthiness of publications before relying on their findings. Use this skill whenever evaluating a paper for a workflow, citing a study, building an analysis on published methods, or when a user asks about the reliability of a study. Checks for formal retractions, corrections, expressions of concern, and — critically — informal contradictions where subsequent studies failed to reproduce key findings. Integrates with PubMed, bioRxiv, and Consensus to provide a trust assessment. Use this skill for ANY publication evaluation, retraction checking, author reliability assessment, or when a user says "can I trust this paper", "is this study reliable", "has this been refuted", or "check this publication".

中文简介正在准备中。当前显示原文说明。

An Agentforce agent is moving from build or sandbox to live end-user traffic and the team needs a comprehensive readiness gate: coverage testing, Trust Layer config, guardrails, cost telemetry, observability, rate limits, permissions, rollout strategy, rollback plan, performance benchmarks. Triggers: 'we want to ship our Agentforce agent next week', 'pre-prod readiness review for our Service Agent', 'what do we need before turning the agent on for real customers', 'agent went live and is hallucinating, what should we have caught', 'cost monitoring for our internal sales agent', 'rollout strategy from internal pilot to GA'. NOT for the lighter five-block activation sign-off artifact — use agentforce/agent-deployment-checklist. NOT for authoring the guardrails themselves — use agentforce/agentforce-guardrails. NOT for building the test harness — use agentforce/agentforce-eval-harness. NOT for Trust Layer feature setup in isolation — use agentforce/einstein-trust-layer.

中文简介正在准备中。当前显示原文说明。

Cryptographic security for agentic systems — zero-trust agent networking, signed message envelopes (JWS/JWE), capability-based security (ocaps), Merkle tree audit trails, WASM sandboxing, and formal verification. Covers CLI dev tool security, mTLS between agents, permission boundaries (least privilege for AI agents), and supply chain security for skills/plugins. Activate on: "agent security", "zero trust agents", "secure agent communication", "capability-based security", "ocap", "signed messages between agents", "agent audit trail", "sandbox agent execution", "agent permissions", "mTLS agents", "cryptographic verification", "agent supply chain", "OWASP agentic", "prove agent did X", "tamper-proof agent logs". NOT for: application-level SAST scanning (use security-auditor), network firewall rules (use infrastructure), SOC2/HIPAA compliance (organizational), or prompt injection defense (use prompt-engineer).

中文简介正在准备中。当前显示原文说明。

Knowledge base from NIST SP 800-160 Vol 1 (Engineering Trustworthy Secure Systems) and Vol 2 (Developing Cyber-Resilient Systems). Use for systems security engineering (SSE): the three SSE framework contexts (problem/solution/trustworthiness), the 30+ design principles for trustworthy secure design, trustworthiness and assurance/assurance cases, security across the ISO/IEC/IEEE 15288 life-cycle process groups, and the Vol 2 cyber-resiliency engineering framework — 4 goals (anticipate/withstand/recover/adapt), objectives, 14 techniques, implementation approaches, and design principles for the APT/adverse-conditions threat model. Bridges systems engineering and the NIST security cluster (CSF/SSDF/RMF). Does not reproduce ISO/IEC/IEEE 15288 process text, nor cover SP 800-53 control catalogs in depth.

中文简介正在准备中。当前显示原文说明。

Cryptographic security for agentic systems — zero-trust agent networking, signed message envelopes (JWS/JWE), capability-based security (ocaps), Merkle tree audit trails, WASM sandboxing, and formal verification. Covers CLI dev tool security, mTLS between agents, permission boundaries (least privilege for AI agents), and supply chain security for skills/plugins. Activate on: "agent security", "zero trust agents", "secure agent communication", "capability-based security", "ocap", "signed messages between agents", "agent audit trail", "sandbox agent execution", "agent permissions", "mTLS agents", "cryptographic verification", "agent supply chain", "OWASP agentic", "prove agent did X", "tamper-proof agent logs". NOT for: application-level SAST scanning (use security-auditor), network firewall rules (use infrastructure), SOC2/HIPAA compliance (organizational), or prompt injection defense (use prompt-engineer).

中文简介正在准备中。当前显示原文说明。

对照已发布版本和信任边界核查OpenClaw漏洞报告，判断应关闭、继续处理还是缩小影响范围，并整理附有依据的维护者回复草稿。

• 评估OpenClaw漏洞报告
• 确认已发布版本是否仍受影响
• 查找与现有安全公告的重复

协助用VLAN按用途划分家庭网络，隔离物联网设备、访客与电脑、服务器的通信，并整理交换机端口、无线网络映射及防火墙规则。

• 将智能家电与电脑及服务器隔离
• 将访客无线网络限制为仅访问互联网
• 为交换机端口和无线网络分配VLAN

为编码代理配置可调用的gbrain，安装命令行工具，使用本地PGLite或Supabase初始化brain，注册MCP，并记录各远程连接的信任策略。

• 在新机器上首次安装gbrain
• 使用本地PGLite初始化
• 配置Supabase方案

检查连接不同环境中智能体的联邦功能，汇总整体运行状态、连接节点的信任等级与评分、会话和消息活动、个人信息遮蔽及威胁检测信息，并搜索已保存的历史记录。

• 检查跨环境智能体连接
• 查看连接节点与信任评分
• 了解会话数量和消息活动

Review a website’s Content Security Policy, which controls allowed resources, and identify unsafe HTML insertion. Guide policy changes and sanitization, then verify actual HTTP responses and browser behavior in a production-like environment.

中文简介正在准备中。当前显示英语简介。

• Reviewing an existing Content Security Policy
• Restricting scripts and third-party resources
• Checking how untrusted HTML is rendered

Research recent X posts by narrowing dates, trusted accounts, and keywords. Compare posts with web search results, link to the original posts, and distinguish reported reactions from claims that lack independent confirmation.

中文简介正在准备中。当前显示英语简介。

• Check recent X reactions to news or product launches
• Research posts from trusted accounts
• Read replies and quotes for context

Investigate prompt injection in sandboxed security challenges by tracing how untrusted text changes an agent’s decisions or tool calls. Build a minimal reproduction and preserve evidence showing where external content crosses into trusted instructions or actions.

中文简介正在准备中。当前显示英语简介。

• Trace instructions hidden in retrieved documents
• Investigate agent behavior changed by stored memory
• Reproduce altered tool arguments or secret exposure

Investigate Kerberos delegation, which lets services act on another identity, in a CTF sandbox. Trace delegation settings, issued tickets, and service acceptance to document a reproducible trust path and the privileges it actually grants.

中文简介正在准备中。当前显示英语简介。

• Identifying constrained, unconstrained, or resource-based delegation
• Tracing S4U steps and issued authentication tickets
• Verifying ticket acceptance and resulting privileges

Set up mutual TLS, where services verify each other's certificates, to secure internal communication. The skill guides certificate hierarchy, rotation, gradual enforcement, and troubleshooting connection failures across services and clusters.

中文简介正在准备中。当前显示英语简介。

• Introduce zero-trust service communication
• Plan certificate rotation and expiry monitoring
• Investigate TLS handshake failures

Manage Codewhale skills from GitHub or local folders using native commands. List, install, update, activate, or remove skills, create a starter structure, and inspect community content before recommending trust for script and tool use.

中文简介正在准备中。当前显示英语简介。

• Listing installed skills
• Installing a community skill from GitHub
• Updating or removing installed skills

Create a local Codewhale plugin bundle with a versioned manifest and Skills named with the plugin prefix. Validate its structure and present review results so a person can decide whether to trust and enable it.

中文简介正在准备中。当前显示英语简介。

• Create a local Codewhale plugin scaffold
• Package Skills under a plugin-specific prefix
• Add required MCP server settings

Deploy Prisma Access to secure access to internal applications for remote users and branches. Configure connectors, GlobalProtect agents, access policies based on user groups and device security, and centralized logging through Strata Cloud Manager.

中文简介正在准备中。当前显示英语简介。

• Migrating VPN and branch security to Prisma Access
• Restricting internal app access by user and device
• Integrating access controls with existing Palo Alto NGFW systems

Configure AWS Verified Access for VPN-free access to internal applications. Combine user identity and device security checks, write Cedar access policies, and use Terraform and AWS RAM to deploy and share access controls across AWS accounts.

中文简介正在准备中。当前显示英语简介。

• Replacing VPN access to internal applications
• Writing policies based on users and device security
• Deploying Verified Access with Terraform

Set up encrypted connections between devices with Tailscale and control access by user or device. The skill covers network routing, device name resolution, and self-hosting the coordination server with Headscale.

中文简介正在准备中。当前显示英语简介。

• Replacing a traditional VPN with Tailscale
• Restricting server access by team or device
• Connecting remotely to internal networks

Build a two-tier certificate authority with OpenSSL and Python, separating the offline root from the issuing authority. Covers server and client certificates, revocation checks, and policies that define certificate usage and trust.

中文简介正在准备中。当前显示英语简介。

• Set up an internal certificate authority
• Issue server and client certificates
• Configure certificate revocation checks