aem-security

النجوم٨

التفرعات٢

آخر تحديث١٨ مارس ٢٠٢٦ في ٠٢:٣٦

AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets

التثبيت

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

تشغيل في Manus

المصدر

techforum-repo

techforum-repo/aem-claude-code

فتح مستودع GitHub عرض مستودعات المنشئ

تنزيل

تشغيل في Manus

المهن ذات الصلةSOC

استنادا إلى تصنيف SOC المهني

محللو أمن المعلوماتمهن الحاسوب والرياضيات·SOC 15-1212

SKILL.md

readonly

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning

المزيد من هذا المستودع

نفس المستودع

aem-accessibility

techforum-repo/aem-claude-code

AEM accessibility review — WCAG 2.1 AA compliance in HTL templates, Coral UI dialogs, and frontend components

2026-03-208

aem-cloudmanager

techforum-repo/aem-claude-code

Cloud Manager and OakPAL review — package filters, embed order, Dispatcher SDK, deployment safety

2026-03-188

aem-headless

techforum-repo/aem-claude-code

AEM headless review — Content Fragment models, GraphQL persisted queries, CF Java integration, CORS, and Dispatcher rules for headless delivery

2026-03-188

aem-oak-index

techforum-repo/aem-claude-code

Oak index review and creation — index type selection, property coverage, evaluatePathRestrictions, async configuration

2026-03-188

aem-performance

techforum-repo/aem-claude-code

AEM performance review — JCR queries, traversal, resolver lifecycle, PostConstruct overhead

2026-03-188

aem-project-conventions

techforum-repo/aem-claude-code

Always-loaded AEM project conventions — naming patterns, package structure, utility library usage, and team-specific standards that Claude applies silently on every task

2026-03-188

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning