发现和使用优秀的技能扩展
检测允许应用在生产环境中不安全运行的故障开放型不安全默认值(硬编码密钥、弱身份验证、宽松安全设置)。在审计安全性、审查配置管理或分析环境变量处理时使用。
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.