[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CKQBXQSNFBP0QBD7H6CFPR":3,"skill-same:01M6CKQBXQSNFBP0QBD7H6CFPR":117},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":27,"publishedAt":46,"linkOnly":47,"markdownContent":48,"markdownBody":49,"frontMatter":50,"refName":51,"commitSha":52,"skillDirectory":53,"forksCount":54,"repositoryHtmlUrl":55,"repositoryHomepageUrl":6,"ownerHtmlUrl":56,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":57,"install":58,"resources":71},"01M6CKQBXQSNFBP0QBD7H6CFPR","senior-secops",null,"Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices. Includes security scanning, vulnerability assessment, compliance checking, and security automation. Use when implementing security controls, conducting security audits, responding to vulnerabilities, or ensuring compliance requirements.","kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002FSKILL.md",[17,22],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":23,"categoryName":24,"taxonomyType":25,"taxonomyTypeDesc":26},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],"secops","senior secops","security automation","security scanning","scanning","use","management","secure development","vulnerability","compliance","application security","vulnerability management","development","assessment","secure","automation","vulnerabilities","security","2026-11-10 10:12:30",false,"---\nname: senior-secops\ndescription: Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices. Includes security scanning, vulnerability assessment, compliance checking, and security automation. Use when implementing security controls, conducting security audits, responding to vulnerabilities, or ensuring compliance requirements.\n---\n\n# Senior SecOps Engineer\n\nComplete toolkit for Security Operations including vulnerability management, compliance verification, secure coding practices, and security automation.\n\n---\n\n## Table of Contents\n\n- [Trigger Terms](#trigger-terms)\n- [Core Capabilities](#core-capabilities)\n- [Workflows](#workflows)\n- [Tool Reference](#tool-reference)\n- [Security Standards](#security-standards)\n- [Compliance Frameworks](#compliance-frameworks)\n- [Best Practices](#best-practices)\n\n---\n\n## Trigger Terms\n\nUse this skill when you encounter:\n\n| Category | Terms |\n|----------|-------|\n| **Vulnerability Management** | CVE, CVSS, vulnerability scan, security patch, dependency audit, npm audit, pip-audit |\n| **OWASP Top 10** | injection, XSS, CSRF, broken authentication, security misconfiguration, sensitive data exposure |\n| **Compliance** | SOC 2, PCI-DSS, HIPAA, GDPR, compliance audit, security controls, access control |\n| **Secure Coding** | input validation, output encoding, parameterized queries, prepared statements, sanitization |\n| **Secrets Management** | API key, secrets vault, environment variables, HashiCorp Vault, AWS Secrets Manager |\n| **Authentication** | JWT, OAuth, MFA, 2FA, TOTP, password hashing, bcrypt, argon2, session management |\n| **Security Testing** | SAST, DAST, penetration test, security scan, Snyk, Semgrep, CodeQL, Trivy |\n| **Incident Response** | security incident, breach notification, incident response, forensics, containment |\n| **Network Security** | TLS, HTTPS, HSTS, CSP, CORS, security headers, firewall rules, WAF |\n| **Infrastructure Security** | container security, Kubernetes security, IAM, least privilege, zero trust |\n| **Cryptography** | encryption at rest, encryption in transit, AES-256, RSA, key management, KMS |\n| **Monitoring** | security monitoring, SIEM, audit logging, intrusion detection, anomaly detection |\n\n---\n\n## Core Capabilities\n\n### 1. Security Scanner\n\nScan source code for security vulnerabilities including hardcoded secrets, SQL injection, XSS, command injection, and path traversal.\n\n```bash\n# Scan project for security issues\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject\n\n# Filter by severity\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject --severity high\n\n# JSON output for CI\u002FCD\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject --json --output report.json\n```\n\n**Detects:**\n- Hardcoded secrets (API keys, passwords, AWS credentials, GitHub tokens, private keys)\n- SQL injection patterns (string concatenation, f-strings, template literals)\n- XSS vulnerabilities (innerHTML assignment, unsafe DOM manipulation, React unsafe patterns)\n- Command injection (shell=True, exec, eval with user input)\n- Path traversal (file operations with user input)\n\n### 2. Vulnerability Assessor\n\nScan dependencies for known CVEs across npm, Python, and Go ecosystems.\n\n```bash\n# Assess project dependencies\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject\n\n# Critical\u002Fhigh only\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject --severity high\n\n# Export vulnerability report\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject --json --output vulns.json\n```\n\n**Scans:**\n- `package.json` and `package-lock.json` (npm)\n- `requirements.txt` and `pyproject.toml` (Python)\n- `go.mod` (Go)\n\n**Output:**\n- CVE IDs with CVSS scores\n- Affected package versions\n- Fixed versions for remediation\n- Overall risk score (0-100)\n\n### 3. Compliance Checker\n\nVerify security compliance against SOC 2, PCI-DSS, HIPAA, and GDPR frameworks.\n\n```bash\n# Check all frameworks\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject\n\n# Specific framework\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework soc2\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework pci-dss\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework hipaa\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework gdpr\n\n# Export compliance report\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --json --output compliance.json\n```\n\n**Verifies:**\n- Access control implementation\n- Encryption at rest and in transit\n- Audit logging\n- Authentication strength (MFA, password hashing)\n- Security documentation\n- CI\u002FCD security controls\n\n---\n\n## Workflows\n\n### Workflow 1: Security Audit\n\nComplete security assessment of a codebase.\n\n```bash\n# Step 1: Scan for code vulnerabilities\npython scripts\u002Fsecurity_scanner.py . --severity medium\n\n# Step 2: Check dependency vulnerabilities\npython scripts\u002Fvulnerability_assessor.py . --severity high\n\n# Step 3: Verify compliance controls\npython scripts\u002Fcompliance_checker.py . --framework all\n\n# Step 4: Generate combined report\npython scripts\u002Fsecurity_scanner.py . --json --output security.json\npython scripts\u002Fvulnerability_assessor.py . --json --output vulns.json\npython scripts\u002Fcompliance_checker.py . --json --output compliance.json\n```\n\n### Workflow 2: CI\u002FCD Security Gate\n\nIntegrate security checks into deployment pipeline.\n\n```yaml\n# .github\u002Fworkflows\u002Fsecurity.yml\nname: Security Scan\n\non:\n  pull_request:\n    branches: [main, develop]\n\njobs:\n  security-scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Set up Python\n        uses: actions\u002Fsetup-python@v5\n        with:\n          python-version: '3.11'\n\n      - name: Security Scanner\n        run: python scripts\u002Fsecurity_scanner.py . --severity high\n\n      - name: Vulnerability Assessment\n        run: python scripts\u002Fvulnerability_assessor.py . --severity critical\n\n      - name: Compliance Check\n        run: python scripts\u002Fcompliance_checker.py . --framework soc2\n```\n\n### Workflow 3: CVE Triage\n\nRespond to a new CVE affecting your application.\n\n```\n1. ASSESS (0-2 hours)\n   - Identify affected systems using vulnerability_assessor.py\n   - Check if CVE is being actively exploited\n   - Determine CVSS environmental score for your context\n\n2. PRIORITIZE\n   - Critical (CVSS 9.0+, internet-facing): 24 hours\n   - High (CVSS 7.0-8.9): 7 days\n   - Medium (CVSS 4.0-6.9): 30 days\n   - Low (CVSS \u003C 4.0): 90 days\n\n3. REMEDIATE\n   - Update affected dependency to fixed version\n   - Run security_scanner.py to verify fix\n   - Test for regressions\n   - Deploy with enhanced monitoring\n\n4. VERIFY\n   - Re-run vulnerability_assessor.py\n   - Confirm CVE no longer reported\n   - Document remediation actions\n```\n\n### Workflow 4: Incident Response\n\nSecurity incident handling procedure.\n\n```\nPHASE 1: DETECT & IDENTIFY (0-15 min)\n- Alert received and acknowledged\n- Initial severity assessment (SEV-1 to SEV-4)\n- Incident commander assigned\n- Communication channel established\n\nPHASE 2: CONTAIN (15-60 min)\n- Affected systems identified\n- Network isolation if needed\n- Credentials rotated if compromised\n- Preserve evidence (logs, memory dumps)\n\nPHASE 3: ERADICATE (1-4 hours)\n- Root cause identified\n- Malware\u002Fbackdoors removed\n- Vulnerabilities patched (run security_scanner.py)\n- Systems hardened\n\nPHASE 4: RECOVER (4-24 hours)\n- Systems restored from clean backup\n- Services brought back online\n- Enhanced monitoring enabled\n- User access restored\n\nPHASE 5: POST-INCIDENT (24-72 hours)\n- Incident timeline documented\n- Root cause analysis complete\n- Lessons learned documented\n- Preventive measures implemented\n- Stakeholder report delivered\n```\n\n---\n\n## Tool Reference\n\n### security_scanner.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory or file to scan |\n| `--severity, -s` | Minimum severity: critical, high, medium, low |\n| `--verbose, -v` | Show files as they're scanned |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: No critical\u002Fhigh findings\n- `1`: High severity findings\n- `2`: Critical severity findings\n\n### vulnerability_assessor.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory containing dependency files |\n| `--severity, -s` | Minimum severity: critical, high, medium, low |\n| `--verbose, -v` | Show files as they're scanned |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: No critical\u002Fhigh vulnerabilities\n- `1`: High severity vulnerabilities\n- `2`: Critical severity vulnerabilities\n\n### compliance_checker.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory to check |\n| `--framework, -f` | Framework: soc2, pci-dss, hipaa, gdpr, all |\n| `--verbose, -v` | Show checks as they run |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: Compliant (90%+ score)\n- `1`: Non-compliant (50-69% score)\n- `2`: Critical gaps (\u003C50% score)\n\n---\n\n## Security Standards\n\n### OWASP Top 10 Prevention\n\n| Vulnerability | Prevention |\n|--------------|------------|\n| **A01: Broken Access Control** | Implement RBAC, deny by default, validate permissions server-side |\n| **A02: Cryptographic Failures** | Use TLS 1.2+, AES-256 encryption, secure key management |\n| **A03: Injection** | Parameterized queries, input validation, escape output |\n| **A04: Insecure Design** | Threat modeling, secure design patterns, defense in depth |\n| **A05: Security Misconfiguration** | Hardening guides, remove defaults, disable unused features |\n| **A06: Vulnerable Components** | Dependency scanning, automated updates, SBOM |\n| **A07: Authentication Failures** | MFA, rate limiting, secure password storage |\n| **A08: Data Integrity Failures** | Code signing, integrity checks, secure CI\u002FCD |\n| **A09: Security Logging Failures** | Comprehensive audit logs, SIEM integration, alerting |\n| **A10: SSRF** | URL validation, allowlist destinations, network segmentation |\n\n### Secure Coding Checklist\n\n```markdown\n## Input Validation\n- [ ] Validate all input on server side\n- [ ] Use allowlists over denylists\n- [ ] Sanitize for specific context (HTML, SQL, shell)\n\n## Output Encoding\n- [ ] HTML encode for browser output\n- [ ] URL encode for URLs\n- [ ] JavaScript encode for script contexts\n\n## Authentication\n- [ ] Use bcrypt\u002Fargon2 for passwords\n- [ ] Implement MFA for sensitive operations\n- [ ] Enforce strong password policy\n\n## Session Management\n- [ ] Generate secure random session IDs\n- [ ] Set HttpOnly, Secure, SameSite flags\n- [ ] Implement session timeout (15 min idle)\n\n## Error Handling\n- [ ] Log errors with context (no secrets)\n- [ ] Return generic messages to users\n- [ ] Never expose stack traces in production\n\n## Secrets Management\n- [ ] Use environment variables or secrets manager\n- [ ] Never commit secrets to version control\n- [ ] Rotate credentials regularly\n```\n\n---\n\n## Compliance Frameworks\n\n### SOC 2 Type II Controls\n\n| Control | Category | Description |\n|---------|----------|-------------|\n| CC1 | Control Environment | Security policies, org structure |\n| CC2 | Communication | Security awareness, documentation |\n| CC3 | Risk Assessment | Vulnerability scanning, threat modeling |\n| CC6 | Logical Access | Authentication, authorization, MFA |\n| CC7 | System Operations | Monitoring, logging, incident response |\n| CC8 | Change Management | CI\u002FCD, code review, deployment controls |\n\n### PCI-DSS v4.0 Requirements\n\n| Requirement | Description |\n|-------------|-------------|\n| Req 3 | Protect stored cardholder data (encryption at rest) |\n| Req 4 | Encrypt transmission (TLS 1.2+) |\n| Req 6 | Secure development (input validation, secure coding) |\n| Req 8 | Strong authentication (MFA, password policy) |\n| Req 10 | Audit logging (all access to cardholder data) |\n| Req 11 | Security testing (SAST, DAST, penetration testing) |\n\n### HIPAA Security Rule\n\n| Safeguard | Requirement |\n|-----------|-------------|\n| 164.312(a)(1) | Unique user identification for PHI access |\n| 164.312(b) | Audit trails for PHI access |\n| 164.312(c)(1) | Data integrity controls |\n| 164.312(d) | Person\u002Fentity authentication (MFA) |\n| 164.312(e)(1) | Transmission encryption (TLS) |\n\n### GDPR Requirements\n\n| Article | Requirement |\n|---------|-------------|\n| Art 25 | Privacy by design, data minimization |\n| Art 32 | Security measures, encryption, pseudonymization |\n| Art 33 | Breach notification (72 hours) |\n| Art 17 | Right to erasure (data deletion) |\n| Art 20 | Data portability (export capability) |\n\n---\n\n## Best Practices\n\n### Secrets Management\n\n```python\n# BAD: Hardcoded secret\nAPI_KEY = \"sk-1234567890abcdef\"\n\n# GOOD: Environment variable\nimport os\nAPI_KEY = os.environ.get(\"API_KEY\")\n\n# BETTER: Secrets manager\nfrom your_vault_client import get_secret\nAPI_KEY = get_secret(\"api\u002Fkey\")\n```\n\n### SQL Injection Prevention\n\n```python\n# BAD: String concatenation\nquery = f\"SELECT * FROM users WHERE id = {user_id}\"\n\n# GOOD: Parameterized query\ncursor.execute(\"SELECT * FROM users WHERE id = %s\", (user_id,))\n```\n\n### XSS Prevention\n\n```javascript\n\u002F\u002F BAD: Direct innerHTML assignment is vulnerable\n\u002F\u002F GOOD: Use textContent (auto-escaped)\nelement.textContent = userInput;\n\n\u002F\u002F GOOD: Use sanitization library for HTML\nimport DOMPurify from 'dompurify';\nconst safeHTML = DOMPurify.sanitize(userInput);\n```\n\n### Authentication\n\n```javascript\n\u002F\u002F Password hashing\nconst bcrypt = require('bcrypt');\nconst SALT_ROUNDS = 12;\n\n\u002F\u002F Hash password\nconst hash = await bcrypt.hash(password, SALT_ROUNDS);\n\n\u002F\u002F Verify password\nconst match = await bcrypt.compare(password, hash);\n```\n\n### Security Headers\n\n```javascript\n\u002F\u002F Express.js security headers\nconst helmet = require('helmet');\napp.use(helmet());\n\n\u002F\u002F Or manually set headers:\napp.use((req, res, next) => {\n  res.setHeader('X-Content-Type-Options', 'nosniff');\n  res.setHeader('X-Frame-Options', 'DENY');\n  res.setHeader('X-XSS-Protection', '1; mode=block');\n  res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');\n  res.setHeader('Content-Security-Policy', \"default-src 'self'\");\n  next();\n});\n```\n\n---\n\n## Reference Documentation\n\n| Document | Description |\n|----------|-------------|\n| `references\u002Fsecurity_standards.md` | OWASP Top 10, secure coding, authentication, API security |\n| `references\u002Fvulnerability_management_guide.md` | CVE triage, CVSS scoring, remediation workflows |\n| `references\u002Fcompliance_requirements.md` | SOC 2, PCI-DSS, HIPAA, GDPR requirements |\n\n---\n\n## Tech Stack\n\n**Security Scanning:**\n- Snyk (dependency scanning)\n- Semgrep (SAST)\n- CodeQL (code analysis)\n- Trivy (container scanning)\n- OWASP ZAP (DAST)\n\n**Secrets Management:**\n- HashiCorp Vault\n- AWS Secrets Manager\n- Azure Key Vault\n- 1Password Secrets Automation\n\n**Authentication:**\n- bcrypt, argon2 (password hashing)\n- jsonwebtoken (JWT)\n- passport.js (authentication middleware)\n- speakeasy (TOTP\u002FMFA)\n\n**Logging & Monitoring:**\n- Winston, Pino (Node.js logging)\n- Datadog, Splunk (SIEM)\n- PagerDuty (alerting)\n\n**Compliance:**\n- Vanta (SOC 2 automation)\n- Drata (compliance management)\n- AWS Config (configuration compliance)\n","# Senior SecOps Engineer\n\nComplete toolkit for Security Operations including vulnerability management, compliance verification, secure coding practices, and security automation.\n\n---\n\n## Table of Contents\n\n- [Trigger Terms](#trigger-terms)\n- [Core Capabilities](#core-capabilities)\n- [Workflows](#workflows)\n- [Tool Reference](#tool-reference)\n- [Security Standards](#security-standards)\n- [Compliance Frameworks](#compliance-frameworks)\n- [Best Practices](#best-practices)\n\n---\n\n## Trigger Terms\n\nUse this skill when you encounter:\n\n| Category | Terms |\n|----------|-------|\n| **Vulnerability Management** | CVE, CVSS, vulnerability scan, security patch, dependency audit, npm audit, pip-audit |\n| **OWASP Top 10** | injection, XSS, CSRF, broken authentication, security misconfiguration, sensitive data exposure |\n| **Compliance** | SOC 2, PCI-DSS, HIPAA, GDPR, compliance audit, security controls, access control |\n| **Secure Coding** | input validation, output encoding, parameterized queries, prepared statements, sanitization |\n| **Secrets Management** | API key, secrets vault, environment variables, HashiCorp Vault, AWS Secrets Manager |\n| **Authentication** | JWT, OAuth, MFA, 2FA, TOTP, password hashing, bcrypt, argon2, session management |\n| **Security Testing** | SAST, DAST, penetration test, security scan, Snyk, Semgrep, CodeQL, Trivy |\n| **Incident Response** | security incident, breach notification, incident response, forensics, containment |\n| **Network Security** | TLS, HTTPS, HSTS, CSP, CORS, security headers, firewall rules, WAF |\n| **Infrastructure Security** | container security, Kubernetes security, IAM, least privilege, zero trust |\n| **Cryptography** | encryption at rest, encryption in transit, AES-256, RSA, key management, KMS |\n| **Monitoring** | security monitoring, SIEM, audit logging, intrusion detection, anomaly detection |\n\n---\n\n## Core Capabilities\n\n### 1. Security Scanner\n\nScan source code for security vulnerabilities including hardcoded secrets, SQL injection, XSS, command injection, and path traversal.\n\n```bash\n# Scan project for security issues\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject\n\n# Filter by severity\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject --severity high\n\n# JSON output for CI\u002FCD\npython scripts\u002Fsecurity_scanner.py \u002Fpath\u002Fto\u002Fproject --json --output report.json\n```\n\n**Detects:**\n- Hardcoded secrets (API keys, passwords, AWS credentials, GitHub tokens, private keys)\n- SQL injection patterns (string concatenation, f-strings, template literals)\n- XSS vulnerabilities (innerHTML assignment, unsafe DOM manipulation, React unsafe patterns)\n- Command injection (shell=True, exec, eval with user input)\n- Path traversal (file operations with user input)\n\n### 2. Vulnerability Assessor\n\nScan dependencies for known CVEs across npm, Python, and Go ecosystems.\n\n```bash\n# Assess project dependencies\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject\n\n# Critical\u002Fhigh only\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject --severity high\n\n# Export vulnerability report\npython scripts\u002Fvulnerability_assessor.py \u002Fpath\u002Fto\u002Fproject --json --output vulns.json\n```\n\n**Scans:**\n- `package.json` and `package-lock.json` (npm)\n- `requirements.txt` and `pyproject.toml` (Python)\n- `go.mod` (Go)\n\n**Output:**\n- CVE IDs with CVSS scores\n- Affected package versions\n- Fixed versions for remediation\n- Overall risk score (0-100)\n\n### 3. Compliance Checker\n\nVerify security compliance against SOC 2, PCI-DSS, HIPAA, and GDPR frameworks.\n\n```bash\n# Check all frameworks\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject\n\n# Specific framework\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework soc2\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework pci-dss\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework hipaa\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --framework gdpr\n\n# Export compliance report\npython scripts\u002Fcompliance_checker.py \u002Fpath\u002Fto\u002Fproject --json --output compliance.json\n```\n\n**Verifies:**\n- Access control implementation\n- Encryption at rest and in transit\n- Audit logging\n- Authentication strength (MFA, password hashing)\n- Security documentation\n- CI\u002FCD security controls\n\n---\n\n## Workflows\n\n### Workflow 1: Security Audit\n\nComplete security assessment of a codebase.\n\n```bash\n# Step 1: Scan for code vulnerabilities\npython scripts\u002Fsecurity_scanner.py . --severity medium\n\n# Step 2: Check dependency vulnerabilities\npython scripts\u002Fvulnerability_assessor.py . --severity high\n\n# Step 3: Verify compliance controls\npython scripts\u002Fcompliance_checker.py . --framework all\n\n# Step 4: Generate combined report\npython scripts\u002Fsecurity_scanner.py . --json --output security.json\npython scripts\u002Fvulnerability_assessor.py . --json --output vulns.json\npython scripts\u002Fcompliance_checker.py . --json --output compliance.json\n```\n\n### Workflow 2: CI\u002FCD Security Gate\n\nIntegrate security checks into deployment pipeline.\n\n```yaml\n# .github\u002Fworkflows\u002Fsecurity.yml\nname: Security Scan\n\non:\n  pull_request:\n    branches: [main, develop]\n\njobs:\n  security-scan:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n\n      - name: Set up Python\n        uses: actions\u002Fsetup-python@v5\n        with:\n          python-version: '3.11'\n\n      - name: Security Scanner\n        run: python scripts\u002Fsecurity_scanner.py . --severity high\n\n      - name: Vulnerability Assessment\n        run: python scripts\u002Fvulnerability_assessor.py . --severity critical\n\n      - name: Compliance Check\n        run: python scripts\u002Fcompliance_checker.py . --framework soc2\n```\n\n### Workflow 3: CVE Triage\n\nRespond to a new CVE affecting your application.\n\n```\n1. ASSESS (0-2 hours)\n   - Identify affected systems using vulnerability_assessor.py\n   - Check if CVE is being actively exploited\n   - Determine CVSS environmental score for your context\n\n2. PRIORITIZE\n   - Critical (CVSS 9.0+, internet-facing): 24 hours\n   - High (CVSS 7.0-8.9): 7 days\n   - Medium (CVSS 4.0-6.9): 30 days\n   - Low (CVSS \u003C 4.0): 90 days\n\n3. REMEDIATE\n   - Update affected dependency to fixed version\n   - Run security_scanner.py to verify fix\n   - Test for regressions\n   - Deploy with enhanced monitoring\n\n4. VERIFY\n   - Re-run vulnerability_assessor.py\n   - Confirm CVE no longer reported\n   - Document remediation actions\n```\n\n### Workflow 4: Incident Response\n\nSecurity incident handling procedure.\n\n```\nPHASE 1: DETECT & IDENTIFY (0-15 min)\n- Alert received and acknowledged\n- Initial severity assessment (SEV-1 to SEV-4)\n- Incident commander assigned\n- Communication channel established\n\nPHASE 2: CONTAIN (15-60 min)\n- Affected systems identified\n- Network isolation if needed\n- Credentials rotated if compromised\n- Preserve evidence (logs, memory dumps)\n\nPHASE 3: ERADICATE (1-4 hours)\n- Root cause identified\n- Malware\u002Fbackdoors removed\n- Vulnerabilities patched (run security_scanner.py)\n- Systems hardened\n\nPHASE 4: RECOVER (4-24 hours)\n- Systems restored from clean backup\n- Services brought back online\n- Enhanced monitoring enabled\n- User access restored\n\nPHASE 5: POST-INCIDENT (24-72 hours)\n- Incident timeline documented\n- Root cause analysis complete\n- Lessons learned documented\n- Preventive measures implemented\n- Stakeholder report delivered\n```\n\n---\n\n## Tool Reference\n\n### security_scanner.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory or file to scan |\n| `--severity, -s` | Minimum severity: critical, high, medium, low |\n| `--verbose, -v` | Show files as they're scanned |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: No critical\u002Fhigh findings\n- `1`: High severity findings\n- `2`: Critical severity findings\n\n### vulnerability_assessor.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory containing dependency files |\n| `--severity, -s` | Minimum severity: critical, high, medium, low |\n| `--verbose, -v` | Show files as they're scanned |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: No critical\u002Fhigh vulnerabilities\n- `1`: High severity vulnerabilities\n- `2`: Critical severity vulnerabilities\n\n### compliance_checker.py\n\n| Option | Description |\n|--------|-------------|\n| `target` | Directory to check |\n| `--framework, -f` | Framework: soc2, pci-dss, hipaa, gdpr, all |\n| `--verbose, -v` | Show checks as they run |\n| `--json` | Output results as JSON |\n| `--output, -o` | Write results to file |\n\n**Exit Codes:**\n- `0`: Compliant (90%+ score)\n- `1`: Non-compliant (50-69% score)\n- `2`: Critical gaps (\u003C50% score)\n\n---\n\n## Security Standards\n\n### OWASP Top 10 Prevention\n\n| Vulnerability | Prevention |\n|--------------|------------|\n| **A01: Broken Access Control** | Implement RBAC, deny by default, validate permissions server-side |\n| **A02: Cryptographic Failures** | Use TLS 1.2+, AES-256 encryption, secure key management |\n| **A03: Injection** | Parameterized queries, input validation, escape output |\n| **A04: Insecure Design** | Threat modeling, secure design patterns, defense in depth |\n| **A05: Security Misconfiguration** | Hardening guides, remove defaults, disable unused features |\n| **A06: Vulnerable Components** | Dependency scanning, automated updates, SBOM |\n| **A07: Authentication Failures** | MFA, rate limiting, secure password storage |\n| **A08: Data Integrity Failures** | Code signing, integrity checks, secure CI\u002FCD |\n| **A09: Security Logging Failures** | Comprehensive audit logs, SIEM integration, alerting |\n| **A10: SSRF** | URL validation, allowlist destinations, network segmentation |\n\n### Secure Coding Checklist\n\n```markdown\n## Input Validation\n- [ ] Validate all input on server side\n- [ ] Use allowlists over denylists\n- [ ] Sanitize for specific context (HTML, SQL, shell)\n\n## Output Encoding\n- [ ] HTML encode for browser output\n- [ ] URL encode for URLs\n- [ ] JavaScript encode for script contexts\n\n## Authentication\n- [ ] Use bcrypt\u002Fargon2 for passwords\n- [ ] Implement MFA for sensitive operations\n- [ ] Enforce strong password policy\n\n## Session Management\n- [ ] Generate secure random session IDs\n- [ ] Set HttpOnly, Secure, SameSite flags\n- [ ] Implement session timeout (15 min idle)\n\n## Error Handling\n- [ ] Log errors with context (no secrets)\n- [ ] Return generic messages to users\n- [ ] Never expose stack traces in production\n\n## Secrets Management\n- [ ] Use environment variables or secrets manager\n- [ ] Never commit secrets to version control\n- [ ] Rotate credentials regularly\n```\n\n---\n\n## Compliance Frameworks\n\n### SOC 2 Type II Controls\n\n| Control | Category | Description |\n|---------|----------|-------------|\n| CC1 | Control Environment | Security policies, org structure |\n| CC2 | Communication | Security awareness, documentation |\n| CC3 | Risk Assessment | Vulnerability scanning, threat modeling |\n| CC6 | Logical Access | Authentication, authorization, MFA |\n| CC7 | System Operations | Monitoring, logging, incident response |\n| CC8 | Change Management | CI\u002FCD, code review, deployment controls |\n\n### PCI-DSS v4.0 Requirements\n\n| Requirement | Description |\n|-------------|-------------|\n| Req 3 | Protect stored cardholder data (encryption at rest) |\n| Req 4 | Encrypt transmission (TLS 1.2+) |\n| Req 6 | Secure development (input validation, secure coding) |\n| Req 8 | Strong authentication (MFA, password policy) |\n| Req 10 | Audit logging (all access to cardholder data) |\n| Req 11 | Security testing (SAST, DAST, penetration testing) |\n\n### HIPAA Security Rule\n\n| Safeguard | Requirement |\n|-----------|-------------|\n| 164.312(a)(1) | Unique user identification for PHI access |\n| 164.312(b) | Audit trails for PHI access |\n| 164.312(c)(1) | Data integrity controls |\n| 164.312(d) | Person\u002Fentity authentication (MFA) |\n| 164.312(e)(1) | Transmission encryption (TLS) |\n\n### GDPR Requirements\n\n| Article | Requirement |\n|---------|-------------|\n| Art 25 | Privacy by design, data minimization |\n| Art 32 | Security measures, encryption, pseudonymization |\n| Art 33 | Breach notification (72 hours) |\n| Art 17 | Right to erasure (data deletion) |\n| Art 20 | Data portability (export capability) |\n\n---\n\n## Best Practices\n\n### Secrets Management\n\n```python\n# BAD: Hardcoded secret\nAPI_KEY = \"sk-1234567890abcdef\"\n\n# GOOD: Environment variable\nimport os\nAPI_KEY = os.environ.get(\"API_KEY\")\n\n# BETTER: Secrets manager\nfrom your_vault_client import get_secret\nAPI_KEY = get_secret(\"api\u002Fkey\")\n```\n\n### SQL Injection Prevention\n\n```python\n# BAD: String concatenation\nquery = f\"SELECT * FROM users WHERE id = {user_id}\"\n\n# GOOD: Parameterized query\ncursor.execute(\"SELECT * FROM users WHERE id = %s\", (user_id,))\n```\n\n### XSS Prevention\n\n```javascript\n\u002F\u002F BAD: Direct innerHTML assignment is vulnerable\n\u002F\u002F GOOD: Use textContent (auto-escaped)\nelement.textContent = userInput;\n\n\u002F\u002F GOOD: Use sanitization library for HTML\nimport DOMPurify from 'dompurify';\nconst safeHTML = DOMPurify.sanitize(userInput);\n```\n\n### Authentication\n\n```javascript\n\u002F\u002F Password hashing\nconst bcrypt = require('bcrypt');\nconst SALT_ROUNDS = 12;\n\n\u002F\u002F Hash password\nconst hash = await bcrypt.hash(password, SALT_ROUNDS);\n\n\u002F\u002F Verify password\nconst match = await bcrypt.compare(password, hash);\n```\n\n### Security Headers\n\n```javascript\n\u002F\u002F Express.js security headers\nconst helmet = require('helmet');\napp.use(helmet());\n\n\u002F\u002F Or manually set headers:\napp.use((req, res, next) => {\n  res.setHeader('X-Content-Type-Options', 'nosniff');\n  res.setHeader('X-Frame-Options', 'DENY');\n  res.setHeader('X-XSS-Protection', '1; mode=block');\n  res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');\n  res.setHeader('Content-Security-Policy', \"default-src 'self'\");\n  next();\n});\n```\n\n---\n\n## Reference Documentation\n\n| Document | Description |\n|----------|-------------|\n| `references\u002Fsecurity_standards.md` | OWASP Top 10, secure coding, authentication, API security |\n| `references\u002Fvulnerability_management_guide.md` | CVE triage, CVSS scoring, remediation workflows |\n| `references\u002Fcompliance_requirements.md` | SOC 2, PCI-DSS, HIPAA, GDPR requirements |\n\n---\n\n## Tech Stack\n\n**Security Scanning:**\n- Snyk (dependency scanning)\n- Semgrep (SAST)\n- CodeQL (code analysis)\n- Trivy (container scanning)\n- OWASP ZAP (DAST)\n\n**Secrets Management:**\n- HashiCorp Vault\n- AWS Secrets Manager\n- Azure Key Vault\n- 1Password Secrets Automation\n\n**Authentication:**\n- bcrypt, argon2 (password hashing)\n- jsonwebtoken (JWT)\n- passport.js (authentication middleware)\n- speakeasy (TOTP\u002FMFA)\n\n**Logging & Monitoring:**\n- Winston, Pino (Node.js logging)\n- Datadog, Splunk (SIEM)\n- PagerDuty (alerting)\n\n**Compliance:**\n- Vanta (SOC 2 automation)\n- Drata (compliance management)\n- AWS Config (configuration compliance)\n",{"name":5,"description":7},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Falirezarezvani\u002Fsenior-secops",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":8,"skillName":5,"commands":59,"prompt":69,"zipAvailable":70},[60,63,66],{"tool":61,"command":62},"npx","npx skills add kbarbel640-del\u002Fskills --skill senior-secops",{"tool":64,"command":65},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill senior-secops",{"tool":67,"command":68},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill senior-secops","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002FSKILL.md",true,[72,78,83,87,91,95,101,105,109,113],{"path":73,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},"_meta.json","REFERENCE","参考文档",286,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002F_meta.json",{"path":79,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":81,"sourceHtmlUrl":82},"LICENSE","许可证",1063,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-design-a-degradation-ladder\u002FLICENSE",{"path":84,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fcompliance_requirements.md",23807,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Freferences\u002Fcompliance_requirements.md",{"path":88,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fsecurity_standards.md",19246,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Freferences\u002Fsecurity_standards.md",{"path":92,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fvulnerability_management_guide.md",14297,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Freferences\u002Fvulnerability_management_guide.md",{"path":96,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":99,"sourceHtmlUrl":100},"scripts\u002Fcompliance_checker.py","SCRIPT","脚本",38622,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Fscripts\u002Fcompliance_checker.py",{"path":102,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":103,"sourceHtmlUrl":104},"scripts\u002Fsecurity_scanner.py",16570,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Fscripts\u002Fsecurity_scanner.py",{"path":106,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":107,"sourceHtmlUrl":108},"scripts\u002Fvulnerability_assessor.py",20415,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Falirezarezvani\u002Fsenior-secops\u002Fscripts\u002Fvulnerability_assessor.py",{"path":110,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":111,"sourceHtmlUrl":112},"SOURCE.md",353,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-design-a-degradation-ladder\u002FSOURCE.md",{"path":114,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":115,"sourceHtmlUrl":116},"TRUST.auto.yaml",2217,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-design-a-degradation-ladder\u002FTRUST.auto.yaml",[118,147,170,191,197,217],{"skillNo":119,"name":120,"nameZh":6,"description":121,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":122,"categories":123,"keywords":127,"publishedAt":46},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[124],{"categoryNo":125,"categoryName":126,"taxonomyType":25,"taxonomyTypeDesc":26},"01JBSEEDCAT000000000000036","内容创作者",[128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":148,"name":149,"nameZh":6,"description":150,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":151,"categories":152,"keywords":154,"publishedAt":46},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[153],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},[155,130,156,157,158,159,160,43,161,162,163,164,165,166,167,168,169,135,33],"dilemm ai","arena","analyze","browser","openclaw agent","create","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking",{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":174,"categories":175,"keywords":179,"publishedAt":46},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[176],{"categoryNo":177,"categoryName":178,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000021","资料检索与研究",[180,181,182,183,184,185,186,131,187,168,33,188,130,189,190],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":192,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":193,"categories":194,"keywords":196,"publishedAt":46},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[195],{"categoryNo":177,"categoryName":178,"taxonomyType":20,"taxonomyTypeDesc":21},[183,182,181,180,190,185,186,131,184,168,33,187,188,130,189],{"skillNo":198,"name":199,"nameZh":6,"description":200,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":201,"categories":202,"keywords":203,"publishedAt":46},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[204,205,206,207,208,209,210,211,212,213,214,215,216],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":218,"name":219,"nameZh":6,"description":220,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":221,"categories":222,"keywords":225,"publishedAt":46},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[223,224],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},{"categoryNo":23,"categoryName":24,"taxonomyType":25,"taxonomyTypeDesc":26},[226,227,228,229,131,230,231,51,232,188,233,234,235,37,236,144,237,238,239],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","actions","state","governance","github"]