网络安全
渗透测试、安全审计、防护加固等网络安全提示词
552 个提示词
面向普通消费者的法律助手，覆盖小额纠纷、租赁、劳动等高频问题，严格区分普法信息与法律意见。 所有回答可溯源、文书可编辑，高风险情形强制转介执业律师。
消费者法律信息与文书助手
智能体产品的端到端研发流水线，提示词/工具/MCP 服务器每次变更都经静态、合成任务、评测、红队、性能门禁与金丝雀分析后才能发布。
End-to-End Agentic CI/CD Pipeline with Synthetic Task Gates
智能体与 MCP 工具的一体化离线评测框架，覆盖轨迹指标、裁判模型校准、配对比较、红队用例与 CI 回归门禁，支撑版本量化晋升。
Agent and MCP Tool Evaluation Harness with CI Gates
基于微虚拟机的 Agent 工具沙箱，提供一次性文件系统、默认禁网、vsock 一次性凭据与防篡改取证，用于安全执行不可信参数和生成式代码。
MicroVM Agent Sandbox for Untrusted Tool Execution
为AI智能体生成的代码与命令构建安全沙箱平台，基于微虚拟机强隔离、默认禁网白名单出口、资源上限、seccomp与策略引擎防止越权与逃逸。
Secure Sandboxed Agent Execution Platform
为长时运行的AI编码智能体构建持久化检查点与恢复基础设施，基于事件溯源支持崩溃续跑、步骤回放、幂等工具调用、人工等待与状态分叉。
Durable Checkpointing for Long-Running Agents
构建AI智能体工具调用框架，支持工具注册、函数调用协议、沙箱执行与多步规划，适用于可执行任务型Agent。
AI Agent Tool Use Framework
构建基于检索增强生成的知识库问答系统，支持多格式文档摄入、混合检索、引用溯源与对话式交互。
RAG Knowledge Base Question Answering System
- MQTT broker (EMQX / Mosquitto) with cluster and shared subscriptions - CoAP for…
Device Connectivity & Protocol
事件驱动架构设计,涵盖事件溯源、CQRS和消息模式。
Event-Driven Architecture Design
Reviews edge network configuration: TLS versions/ciphers, HSTS, DNSSEC, CORS, headers, and certificate lifecycle.
Network/HTTPS/TLS & DNS Hardener
When credentials hit git/logs/chat: immediate containment, rotation, and remediation — executed in the right order.
Secrets Detection & Incident Response for Leaked Keys
Hardens uploads against executable content, decompression bombs, polyglots, and SSRF in import-from-URL features.
File Upload Security Reviewer
Eliminates XSS sinks in a codebase and configures a real CSP with nonce strategy.
XSS / Output Encoding & CSP Hardener
Hardens data-access code and verifies every dynamic query path is parameterized.
SQL Injection / NoSQL Injection Defense Coder
Deep review of token-based auth: signing, expiry, rotation, revocation, and storage — catches the classic JWT mistakes.
JWT / Session Implementation Reviewer
Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.
OWASP Top 10 Self-Audit Checklist for an Endpoint
review, DPIA triggers, breach notification runbook (72h), and privacy tests in CI (PII…
Lifecycle/incident: retention scheduler with legal-hold exception, vendor DPA
opt-in/out propagated to all tags/systems, marketing suppression, age/parental rules…
Consent & cookies: consent management (strictly-necessary separation), granular
export package (machine-readable, per category); rectification; deletion that propagates…
User rights pipeline (DSAR): unified identity resolution across services;
analytics, encryption + KMS, environment separation, access RBAC with approval for…
Minimization & controls: collect least data, pseudonymize/hash identifiers in
legal basis, retention, processors/sub-processors, cross-border transfers), data-flow…
Data mapping: inventory of personal data per system (collection points, purpose,
Implements privacy by design: inventory, minimization, consent, DSAR pipeline, and deletion across systems.
Data Governance / Privacy Engineering (GDPR)
Secure auth flows: registration, login, MFA, session/token lifecycle, password reset, OAuth social login. Reviews against current OWASP ASW.