为 Quarkus 应用实现并检查身份认证、访问权限和输入验证,同时涵盖机密信息管理、密码哈希、请求限制、审计日志及依赖项已知漏洞检查。
- 为 Quarkus API 添加 JWT 或 OIDC 认证
- 检查角色权限与数据归属验证
- 审查输入验证与数据库查询
770 个 · 按相关度排序
为 Quarkus 应用实现并检查身份认证、访问权限和输入验证,同时涵盖机密信息管理、密码哈希、请求限制、审计日志及依赖项已知漏洞检查。
Verify RuView pipeline output against a reference hash, package evidence for others to check, and review accuracy statements. The skill distinguishes measured, claimed, and synthetic results and requires real device logs for hardware validation.
中文简介正在准备中。当前显示英语简介。
Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.
中文简介正在准备中。当前显示英语简介。
Verify the witness chain, a linked record of evidence, for a Cognitum Seed device. Check for missing recording periods and broken hash links, report an integrity score, and save detected gaps for auditing.
中文简介正在准备中。当前显示英语简介。
Review and strengthen security in claude-flow v3 by addressing dependency risks, password hashing, credential generation, input validation, file paths, and command execution. It also guides threat modeling and tests for security-critical code.
中文简介正在准备中。当前显示英语简介。
Explore trends across Google Trends, Instagram, Facebook, YouTube, and TikTok using Apify data collection tools. Get a summary of emerging topics, hashtags, or sounds to guide content planning, with optional CSV or JSON exports.
中文简介正在准备中。当前显示英语简介。
Guide Prisma 8 development by selecting task-specific references for data definitions, queries, migrations that change database structure, runtime setup, debugging, and upgrades. Check package versions and generated contract files before proceeding with implementation.
中文简介正在准备中。当前显示英语简介。
Review an existing security case package before report handoff. Check links between evidence, findings, investigation paths, tasks, and timeline entries, optionally verify file hashes to detect changes, and produce a Markdown or JSON review.
中文简介正在准备中。当前显示英语简介。
Move reusable code and its tests from OpenHuman into the appropriate tiny* submodule. Separate host responsibilities, update module interfaces, verify the migration, and align release versions and integrity hashes when a loadable module changes.
中文简介正在准备中。当前显示英语简介。
Investigate attacks that make legitimate Windows applications load malicious DLL files. This skill examines loading events, digital signatures, file hashes, and unusual locations, then checks process behavior to document suspicious cases and guide remediation.
中文简介正在准备中。当前显示英语简介。
Investigate DCSync attacks, which abuse Active Directory replication to steal password hashes. Use audit events and network traffic to identify suspicious replication requests, examine their sources, and check for subsequent credential misuse.
中文简介正在准备中。当前显示英语简介。
Investigate attackers moving between internal systems by correlating login records with network traffic. Supports detection rules, suspicious SMB and RDP activity analysis, and reports showing attack timelines, affected hosts, and monitoring gaps.
中文简介正在准备中。当前显示英语简介。
Investigate suspicious IP addresses, domains, URLs, file hashes, and email artifacts using multiple threat intelligence sources. Assess confidence that each indicator is malicious, check links to known campaigns, and document evidence for blocking, monitoring, or allowing it.
中文简介正在准备中。当前显示英语简介。
Investigate suspicious URLs with URLScan.io by reviewing screenshots, redirects, page content, and network requests. Extract domains, IP addresses, and file hashes as indicators of compromise, then compare findings with threat intelligence sources.
中文简介正在准备中。当前显示英语简介。
Assess Shadow Credentials account takeover during authorized Active Directory testing. Examine permissions that allow public key registration, validate authentication without a password reset, and document credential cleanup, detection opportunities, and access control changes needed for remediation.
中文简介正在准备中。当前显示英语简介。
Build a custom branded Qwen Code desktop package from its Tauri shell using a brand identifier and local logo. Apply app naming, icons, and startup screen changes, then report generated installers and their verification hashes.
中文简介正在准备中。当前显示英语简介。
Checks published OpenWork desktop downloads for mac-arm64, verifying developer signatures, Apple notarization, and update metadata. It checks versions, download references, and file hashes, then records evidence to support a release rollout decision.
中文简介正在准备中。当前显示英语简介。
Identify checks and changing global state that block fuzzing, then adjust them in fuzzing builds. The skill covers targeted validation bypasses, repeatable behavior, coverage comparisons, and checks for false crash reports introduced by patches.
中文简介正在准备中。当前显示英语简介。
Review lateral movement, the ways access spreads between systems, during authorized security tests. Covers credential reuse, remote execution, network tunnels, prerequisites, and the logs or defensive controls associated with each technique.
中文简介正在准备中。当前显示英语简介。
Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.
中文简介正在准备中。当前显示英语简介。
Assess Active Directory security by mapping accounts, permissions, and paths to administrative access. The skill covers credential misuse, certificate service misconfigurations, movement between systems, and hybrid identity environments involving Entra ID.
中文简介正在准备中。当前显示英语简介。
Collect posts from X search, profile, individual post, and list URLs. Organize text, authors, engagement counts, media, hashtags, and mentions into a consistent dataset, with support for collecting additional pages.
中文简介正在准备中。当前显示英语简介。
Extract details from TikTok video URLs, including captions, author profiles, view and engagement counts, music, and hashtags. Process individual posts or a list of URLs, with image links available for slideshow posts.
中文简介正在准备中。当前显示英语简介。
Check AI watermarks through Google, OpenAI, Microsoft, or Meta verification services. The skill links results to file hashes, identifiers used to verify file integrity, and records separate evidence for each configured account and verification route.
中文简介正在准备中。当前显示英语简介。