“API安全”

我们计划基于 MIN

OWASP Top 10 Self-Audit Checklist for an Endpoint

Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.

不当的资产管理

Network/HTTPS/TLS & DNS Hardener

Reviews edge network configuration: TLS versions/ciphers, HSTS, DNSSEC, CORS, headers, and certificate lifecycle.

Serverless Architecture Design

无服务器架构设计,涵盖FaaS、事件驱动和成本优化。

The Graph / Indexing

手工审查重点领域

Manual review focus areas

交互式图像生成器

来自交互式图像生成器的AI提示词

AI代码生成IDE插件

构建AI代码生成IDE插件，支持代码补全、上下文感知生成、重构建议与单元测试生成， 集成VS Code与JetBrains，适用于提升开发者编码效率。

AI Agent工具调用框架

构建AI智能体工具调用框架，支持工具注册、函数调用协议、沙箱执行与多步规划， 适用于可执行任务型Agent与自动化操作场景。

代码库语义索引服务

构建代码库语义与结构索引服务，解析符号图与代码块嵌入，支持提交级增量索引与 精确定位，为AI编程智能体提供高质量检索底座。

Python Production Script / CLI Generator

Generates a robust Python CLI with argparse, logging, retries, dry-run, and typed config — ideal for automation, data pipelines, and internal ops scripts.

Mobile (iOS/Android/Flutter) Feature Coder

Generates a mobile screen/feature with offline support, lifecycle correctness, and platform conventions.

Docstrings/JSDoc: summary line (imperative), params/returns with units and

Chaos & Resilience Test Engineer

Designs controlled failure injection to verify retry/fallback/deadline/circuit breaker behavior actually works under load.

RBAC / ABAC Authorization Engine

Designs and codes a maintainable permission system: role hierarchy, resource-level checks, policy evaluation, and tests — preventing authorization sprawl.

Operations & Monitoring

AI Code Generation IDE Plugin

构建AI代码生成IDE插件，支持代码补全、上下文感知生成、重构建议与单元测试生成，集成VS Code与JetBrains。

AI Agent Tool Use Framework

构建AI智能体工具调用框架，支持工具注册、函数调用协议、沙箱执行与多步规划，适用于可执行任务型Agent。