发现和使用优秀的技能扩展
审计代码库和基础设施以发现安全问题。用于扫描依赖项的漏洞、检测硬编码密钥、检查OWASP Top 10问题、验证SSL/TLS、审计文件权限,或审查代码中的注入和身份验证缺陷。
Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.