aem-security

스타8

포크2

업데이트2026년 3월 18일 02:36

AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

techforum-repo

techforum-repo/aem-claude-code

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

관련 직업SOC

SOC 직업 분류 기준

정보 보안 분석가컴퓨터 및 수학직·SOC 15-1212

SKILL.md

readonly

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning

이 저장소의 다른 Skills

같은 저장소

aem-accessibility

techforum-repo/aem-claude-code

AEM accessibility review — WCAG 2.1 AA compliance in HTL templates, Coral UI dialogs, and frontend components

2026-03-208

aem-cloudmanager

techforum-repo/aem-claude-code

Cloud Manager and OakPAL review — package filters, embed order, Dispatcher SDK, deployment safety

2026-03-188

aem-headless

techforum-repo/aem-claude-code

AEM headless review — Content Fragment models, GraphQL persisted queries, CF Java integration, CORS, and Dispatcher rules for headless delivery

2026-03-188

aem-oak-index

techforum-repo/aem-claude-code

Oak index review and creation — index type selection, property coverage, evaluatePathRestrictions, async configuration

2026-03-188

aem-performance

techforum-repo/aem-claude-code

AEM performance review — JCR queries, traversal, resolver lifecycle, PostConstruct overhead

2026-03-188

aem-project-conventions

techforum-repo/aem-claude-code

Always-loaded AEM project conventions — naming patterns, package structure, utility library usage, and team-specific standards that Claude applies silently on every task

2026-03-188

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning