“credentials”的搜索结果

梳理AI智能体读取外部信息并操作工具或文件时的安全措施，检查权限、保存路径、连接目标及凭据处理，并通过实际执行验证防护是否生效。

• 检查智能体的安全措施
• 验证用户与工作区之间的数据隔离
• 验证凭据清理和输出限制

将本地反复执行的Hermes工作流程整理为可公开复用的ECC技能和发布资料，移除个人信息与凭据，替换本机路径，并列明公开输入、已移除的私有输入和剩余风险。

• 将重复任务整理为公开技能
• 整理可公开的交接资料
• 编写不含私有数据的夜间任务文档

通过Stripe Projects为项目配置数据库、短信等外部服务，将凭据同步至`.env`，并统一管理服务密钥更新、套餐变更及服务移除。

• 为项目配置Neon Postgres
• 为应用添加短信服务
• 同步凭据并更新服务密钥

将外部服务的初始设置和凭据登记整理为供人逐步操作的交互式bash脚本，包含操作指引、输入值保存、剩余阶段提示及各阶段确认。

• 引导外部服务的手动设置
• 在本地和持续集成中配置凭据
• 为团队编写初始设置流程

从Hermes创建Paperclip任务、添加进度评论、更新状态并查看分配给自己的任务，使用权限受限的API密钥在获准范围内协作。

• 在获准工作下创建子任务
• 通过评论记录进度
• 更新待审或阻塞状态

从终端管理AI服务连接，查看连接列表、进行单项或批量测试、更新API密钥，并查询使用量与费用。也支持不进行外部通信的本地配置结构验证。

• 批量测试所有启用的连接
• 不进行外部通信地验证配置
• 更新和管理连接凭据及API密钥

通过API管理OmniRoute的AI服务连接，添加、更新、删除和测试连接，更新API密钥与身份验证信息，并查看使用情况及连接健康状态。

• 添加或更新AI服务连接
• 更新已过期的身份验证信息
• 批量测试多个连接

将OmniRoute配置、服务提供商连接信息及各项设置与云存储同步，并管理远程访问所用的cloud worker认证、凭据更新和远程备份目标。

• 将设置与云存储同步
• 初始化云同步
• 更新cloud worker凭据

Audit whether author profiles clearly present relevant experience, qualifications, and professional links. Review rendered pages, metadata, structured data, and HTTP responses to identify specific places where author expertise needs clearer presentation and explain how to verify improvements.

中文简介正在准备中。当前显示英语简介。

• Check whether article authors have relevant biographies
• Improve profiles with qualifications and professional links
• Audit author information in rendered HTML and structured data

Deploy and operate AI agents with AWS Bedrock AgentCore. Choose services for hosting agents, connecting external APIs, managing credentials and conversation state, monitoring activity, and assessing agent quality through automated evaluations.

中文简介正在准备中。当前显示英语简介。

• Plan an agent deployment on AgentCore
• Expose a REST API as an agent tool through MCP
• Configure credentials and access controls

Store database credentials and API keys in AWS Secrets Manager, configure automatic credential changes, and connect applications to stored secrets. Follow examples for access policies, Lambda rotation functions, and integration with ECS and EKS.

中文简介正在准备中。当前显示英语简介。

• Move hardcoded credentials into AWS Secrets Manager
• Configure automatic database credential rotation
• Provide stored secrets to ECS and EKS workloads

Use ccxt-cli to query cryptocurrency exchanges from the terminal without writing application code. Check prices, balances, and orders, stream live market data, display candlestick charts, and return JSON results for shell scripts.

中文简介正在准备中。当前显示英语简介。

• Check market prices and account balances from the terminal
• Test API credentials and inspect request errors
• Compare live prices across exchanges

Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.

中文简介正在准备中。当前显示英语简介。

• Inspect DPAPI-protected data and masterkeys
• Trace credentials stored by browsers or Windows Vault
• Identify the account or machine context needed for decryption

Trace movement between Windows hosts in a CTF sandbox using credentials and Kerberos tickets, which carry authentication information. Connect recovered artifacts to the service that accepted them and document the resulting access or privileges.

中文简介正在准备中。当前显示英语简介。

• Trace movement between Windows hosts
• Identify services that accept recovered credentials
• Connect Kerberos tickets to resulting access

Test desktop application security across local storage, communication between processes, network traffic, and update channels. Map where trust and permissions change, then investigate weaknesses in credentials, access checks, and update verification.

中文简介正在准备中。当前显示英语简介。

• Checking how desktop apps store credentials
• Reviewing authentication between local processes
• Inspecting app traffic and API access controls

Helps connect Feishu or Lark bots, documents, spreadsheets, and approval workflows. Guides API authentication and MCP setup, a way to expose tools to agents, using environment variables for credentials and verification before externally visible changes.

中文简介正在准备中。当前显示英语简介。

• Setting up bot webhook notifications
• Reading and updating documents or spreadsheets
• Querying Bitable records

Set up and publish a DingTalk application and bot through a visible browser, then receive guidance for connecting it to QwenPaw. Automation pauses for manual login, and users enter the resulting credentials into QwenPaw themselves.

中文简介正在准备中。当前显示英语简介。

• Create a DingTalk bot for use with QwenPaw
• Set application details and bot images
• Publish a new version after configuration changes

Assess an authorized Active Directory environment by simulating attacks against credentials, permissions, and trust relationships. Use BloodHound and related testing tools to identify paths to administrator access, evaluate detection capabilities, and document findings with remediation recommendations.

中文简介正在准备中。当前显示英语简介。

• Assessing Active Directory security with written authorization
• Finding paths from ordinary users to administrator access
• Reviewing Kerberos and delegation settings

Guide malware cleanup on infected Windows and Linux systems after containment and investigation. Covers removing malicious files and mechanisms that preserve attacker access, rotating credentials, patching entry points, and documenting validation results before recovery.

中文简介正在准备中。当前显示英语简介。

• Cleaning infected systems after containment
• Removing mechanisms that preserve attacker access
• Rotating compromised credentials and fixing entry points

Scan code, configuration files, and Git history for exposed AWS credentials with TruffleHog. Checks whether detected keys remain active and guides key replacement, incident investigation, and automated checks before commits and during CI/CD.

中文简介正在准备中。当前显示英语简介。

• Auditing Git history for exposed AWS keys
• Adding credential checks before commits and in CI/CD
• Investigating credential exposure after a GuardDuty alert

Investigate misuse of application identities in Microsoft Entra ID using audit and sign-in logs. Provides detection queries and investigation steps for suspicious credential additions, privileged role assignments, consent grants, and service principal enumeration.

中文简介正在准备中。当前显示英语简介。

• Investigating suspicious additions of application credentials
• Reviewing privileged roles assigned to application identities
• Building detection rules for Entra ID identity abuse

Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.

中文简介正在准备中。当前显示英语简介。

• Implement authorization with PKCE for web and mobile apps
• Configure authorization for service-to-service communication
• Review token storage, renewal, and revocation

Respond to security incidents across AWS, Azure, and GCP by investigating audit logs, containing compromised identities, isolating resources, and preserving evidence. Organize recovery and follow-up security measures for credential leaks, unauthorized permission changes, and attacks spanning cloud services.

中文简介正在准备中。当前显示英语简介。

• Responding to leaked cloud credentials
• Investigating unauthorized permission or resource changes
• Preserving audit logs and disk snapshots

Install or refresh OneCLI as NanoClaw’s gateway for credentials and approval events. The skill restores integration files and agent guidance, configures a local or remote gateway, and validates the setup using a pinned SDK and tests.

中文简介正在准备中。当前显示英语简介。

• Adding OneCLI during NanoClaw setup
• Migrating an existing OneCLI integration
• Restoring integration files and agent guidance