メニュー
API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Blog writing operations: concrete drafts, diagnosis, comment strategy, external sources, and recurring gotchas.
사용자 요청을 Blog, Luna, Darwin, Sigma, Ska, Hub/Orchestrator 등 적절한 팀과 런타임으로 라우팅할 때 사용.
Use for non-trivial production code changes that require expert challenge and consensus, test-first implementation, soft and read-only hard verification, runtime and DB consistency checks, refactoring discipline, and an independent code-review gate.
Use when diagnosing or improving Luna investment-team autonomous operation bottlenecks, especially the 30-minute Codex automation loop, live-fire watchdog issues, LLM hot-path overuse, discovery funnel stalls, marketdata connectivity, reconcile blockers, or safe fix planning.
Hub routing, resilience, alarm lifecycle, and Sigma feedback operations.
Darwin research cycle operations: cycle overview, predicate authoring, adopt review, and recurring gotchas.
| name | owasp-security |
| description | API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용. |
기능 구현 후 보안 검토를 별도 단계로 분리한다. 특히 MCP, Hub API, webhook, secret-store, 자동화 권한 변경에 적용한다.
Assets:
Trust boundaries:
Findings:
Attack path:
Fix:
Residual risk: