aem-security

星标8

分支2

更新时间2026年3月18日 02:36

AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

techforum-repo

techforum-repo/aem-claude-code

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

相关职业SOC

基于 SOC 职业分类

信息安全分析师计算机与数学类职业·SOC 15-1212

SKILL.md

readonly

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning

同仓库更多 Skills

同仓库

aem-accessibility

techforum-repo/aem-claude-code

AEM accessibility review — WCAG 2.1 AA compliance in HTL templates, Coral UI dialogs, and frontend components

2026-03-208

aem-cloudmanager

techforum-repo/aem-claude-code

Cloud Manager and OakPAL review — package filters, embed order, Dispatcher SDK, deployment safety

2026-03-188

aem-headless

techforum-repo/aem-claude-code

AEM headless review — Content Fragment models, GraphQL persisted queries, CF Java integration, CORS, and Dispatcher rules for headless delivery

2026-03-188

aem-oak-index

techforum-repo/aem-claude-code

Oak index review and creation — index type selection, property coverage, evaluatePathRestrictions, async configuration

2026-03-188

aem-performance

techforum-repo/aem-claude-code

AEM performance review — JCR queries, traversal, resolver lifecycle, PostConstruct overhead

2026-03-188

aem-project-conventions

techforum-repo/aem-claude-code

Always-loaded AEM project conventions — naming patterns, package structure, utility library usage, and team-specific standards that Claude applies silently on every task

2026-03-188

name	aem-security
description	AEM security review — admin resolver, query injection, path validation, exposed endpoints, hardcoded secrets
allowed-tools	Read, Grep, Glob
argument-hint	[file or class path]

Review $ARGUMENTS for AEM security issues. Report each finding as Blocking / Warning / Suggestion.

Admin ResourceResolver or loginAdministrative usage — Blocking; replace with service user
JCR-SQL2 or XPath query built from untrusted input — Blocking; use bound parameters only
Path-based input passed to repository lookups without validation — Blocking
Hardcoded credentials, tokens, or API keys — Blocking
Request-scoped state stored in an OSGi singleton field — Blocking
Stack traces or internal paths exposed in responses or logs — Warning
Path-based servlet registration without Dispatcher filter consideration — Warning
Service user permissions broader than minimum required — Warning
Sensitive data in log statements — Warning