القائمة
Secure the administrative interface of model registries. Use when building, deploying, or reviewing model registry access controls and admin interfaces.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Security-focused review of AI-generated or AI-assisted code. Use when reviewing code produced by AI coding assistants, auditing AI-generated patches, verifying AI-assisted contributions before merge, or when a review needs to account for failure modes specific to AI code generation.
Configure Kubernetes network security including host access restrictions, network policies, port management, and connectivity requirements. Use when writing, reviewing, or auditing pod specs, Services, NetworkPolicies, or NetworkAttachmentDefinitions.
Secure AI-powered products and infrastructure. Use when integrating LLM APIs, deploying model-serving infrastructure, building agent workflows, connecting MCP servers, or reviewing AI system architecture for security gaps.
Enforce standard authentication for external data source connections. Use when integrating, configuring, or reviewing connections from AI systems to external databases, APIs, or data services.
Harden container images and runtime configuration. Use when building, reviewing, or auditing Containerfiles, Dockerfiles, container compose files, or Kubernetes pod security settings.
Supply chain security audit using CLI vulnerability scanners, license compliance checks, and supply chain risk assessment. Use when auditing project dependencies for known CVEs, license concerns, and supply chain health.
| name | admin-interface-security |
| description | Secure the administrative interface of model registries. Use when building, deploying, or reviewing model registry access controls and admin interfaces. |
| category | secure_development |
| subcategory | model-registry |
If the model registry has an administrative interface, only identified, authenticated, and authorized users MUST be able to connect to it.
| Control | Description |
|---|---|
| Identification | Every admin user must have a unique identity (no shared accounts) |
| Authentication | Standard authentication mechanism (OIDC/OAuth 2.1 recommended) |
| Authorization | RBAC or ABAC to control which admin operations each user can perform |
| Multi-factor authentication | MFA recommended for administrative access |
| Session management | Short-lived sessions with automatic timeout |
| Operation | Risk |
|---|---|
| Model upload/publish | Introducing malicious or backdoored models |
| Model deletion | Removing approved models, causing service disruption |
| Access control changes | Granting unauthorized users access to models |
| Configuration changes | Weakening security settings |
| Registry metadata modification | Altering model provenance information |
