菜单
API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Blog writing operations: concrete drafts, diagnosis, comment strategy, external sources, and recurring gotchas.
사용자 요청을 Blog, Luna, Darwin, Sigma, Ska, Hub/Orchestrator 등 적절한 팀과 런타임으로 라우팅할 때 사용.
Use for non-trivial production code changes that require expert challenge and consensus, test-first implementation, soft and read-only hard verification, runtime and DB consistency checks, refactoring discipline, and an independent code-review gate.
Use when diagnosing or improving Luna investment-team autonomous operation bottlenecks, especially the 30-minute Codex automation loop, live-fire watchdog issues, LLM hot-path overuse, discovery funnel stalls, marketdata connectivity, reconcile blockers, or safe fix planning.
Hub routing, resilience, alarm lifecycle, and Sigma feedback operations.
Darwin research cycle operations: cycle overview, predicate authoring, adopt review, and recurring gotchas.
| name | owasp-security |
| description | API, MCP, 웹훅, secret, 인증/권한 변경을 OWASP 관점으로 검토할 때 사용. |
기능 구현 후 보안 검토를 별도 단계로 분리한다. 특히 MCP, Hub API, webhook, secret-store, 자동화 권한 변경에 적용한다.
Assets:
Trust boundaries:
Findings:
Attack path:
Fix:
Residual risk: