Menu
API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Blog writing operations: concrete drafts, diagnosis, comment strategy, external sources, and recurring gotchas.
사용자 요청을 Blog, Luna, Darwin, Sigma, Ska, Hub/Orchestrator 등 적절한 팀과 런타임으로 라우팅할 때 사용.
Use for non-trivial production code changes that require expert challenge and consensus, test-first implementation, soft and read-only hard verification, runtime and DB consistency checks, refactoring discipline, and an independent code-review gate.
Use when diagnosing or improving Luna investment-team autonomous operation bottlenecks, especially the 30-minute Codex automation loop, live-fire watchdog issues, LLM hot-path overuse, discovery funnel stalls, marketdata connectivity, reconcile blockers, or safe fix planning.
Hub routing, resilience, alarm lifecycle, and Sigma feedback operations.
Darwin research cycle operations: cycle overview, predicate authoring, adopt review, and recurring gotchas.
| name | owasp-security |
| description | API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용. |
기능 구현 후 보안 검토를 별도 단계로 분리한다. 특히 MCP, Hub API, webhook, secret-store, 자동화 권한 변경에 적용한다.
Assets:
Trust boundaries:
Findings:
Attack path:
Fix:
Residual risk: