Security Auditor
eigent-ai/eigent
Audits source code, dependencies and config files for vulnerabilities and hardcoded secrets, using two bundled Python scanners and an OWASP Top 10 checklist.
AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-ko --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .claude/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .claude/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-koType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-ko --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .agents/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .agents/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-ko --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .cursor/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .cursor/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/cdppcorp/KESE-KIT.git --path skills-ko/kesekit-guide-ko--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-ko --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .gemini/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .gemini/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-koInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .github/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .github/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-guide-ko --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills-ko/kesekit-guide-ko .opencode/skills/kesekit-guide-ko && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "kesekit-guide-ko" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills-ko/kesekit-guide-ko into .opencode/skills/kesekit-guide-ko/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-guide-ko", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
kesekit-guide-koAI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다.
Kesekit Guide Ko is an agent skill from cdppcorp/KESE-KIT. AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다. KISA CII, CWE 매핑, AI 보안, 로봇 보안, 우주 보안(CCSDS/위성 프로토콜/GSaaS/공급망) 가이드를 지원합니다. "보안 가이드 생성", "시큐어코딩 가이드", "우주 시큐어코딩", "위성 보안 가이드" 시 사용하세요.
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 81 other files, including scripts and reference files (for example `references/ai-security/overview.md`, `references/ai-security/service-provider.md` and `references/ai-security/user-guide.md`).
It sits in Security, covering Web application vulnerabilities. It works with OpenAI and Python. The repository describes itself as: KISA 주요정보통신기반시설 기술적 취약점 분석 평가방법 상세가이드 기반 Skills. The licence is MIT.
4 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit cd118f9. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 3 files in scripts/, which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Kesekit Guide Ko loads about 1.3k tokens when it runs, and up to ~17k if it reads all its reference files. Until then it costs about 54 tokens; SKILL.md has 674 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
The full file from cdppcorp/KESE-KIT at commit cd118f9, republished under its MIT licence (© cdppcorp). 674 words, ~1,269 tokens.
.claude/skills/kesekit-guide-ko/SKILL.md (or your agent's skills folder). This skill also uses 74 other files; get the full folder from GitHub.KISA 가이드라인과 국제 표준(OWASP, CWE)을 기반으로 AI 도구용 시큐어 코딩 프롬프트를 생성합니다.
| # | 가이드라인 | 설명 |
|---|---|---|
| 1 | CII 시큐어코딩 | 전통적 보안 취약점 (SQL Injection, XSS 등) |
| 2 | AI 보안 시큐어코딩 | AI 특화 보안 (Prompt Injection, 데이터 중독 등) |
| 3 | 로봇 보안 시큐어코딩 | 로봇 특화 보안 (IEC 62443, 펌웨어, 통신 프로토콜) |
| 4 | 우주 보안 시큐어코딩 | 우주 특화 보안 (CCSDS, 위성 프로토콜, GSaaS, 공급망) |
| 5 | 시큐어코딩 (언어별) | 언어별 시큐어코딩 (JS, Python, pseudo code) |
| 6 | 제로트러스트 가이드 | 제로트러스트 아키텍처 및 성숙도 평가 가이드 (8개 핵심요소, ~396항목) |
웹/서버/DB 개발 → CII / AI 모델/LLM/AI 서비스 개발 → AI 보안 / 로봇 펌웨어, ROS/ROS2, 로봇 API, 산업 프로토콜 개발 → 로봇 보안 / 위성 통신, 지상국, GSaaS API, 우주 공급망 → 우주 보안 / JavaScript, Python, 기타 언어 → 시큐어코딩 (언어별) Zero Trust, ZTA, ZTNA, 제로트러스트, 마이크로세그멘테이션, microsegmentation, SDP, SASE, PEP/PDP, never trust always verify → 제로트러스트
templates/cii/webapp.md를 참조하여 CWE 기반 시큐어 코딩 프롬프트를 생성합니다. 점검/수정 스크립트는 scripts/cii/에 있습니다.
| CWE | 이름 | 방지 방법 |
|---|---|---|
| CWE-20 | 부적절한 입력 검증 | 모든 입력 검증 |
| CWE-22 | 경로 조작 | 경로 정규화 및 검증 |
| CWE-78 | OS Command Injection | shell 피하기, 인자 리스트 |
| CWE-79 | XSS | 출력 인코딩, CSP |
| CWE-89 | SQL Injection | 매개변수화된 쿼리 |
| CWE-94 | Code Injection | eval(), exec() 피하기 |
| CWE-287 | 부적절한 인증 | 검증된 프레임워크 사용 |
| CWE-327 | 약한 암호화 | AES-256, RSA-2048+ |
| CWE-352 | CSRF | CSRF 토큰 |
| CWE-434 | 무제한 업로드 | 타입, 크기, 이름 검증 |
| CWE-502 | 안전하지 않은 역직렬화 | JSON 사용 |
| CWE-611 | XXE | 외부 엔티티 비활성화 |
| CWE-798 | 하드코딩된 자격 증명 | 환경 변수 사용 |
| CWE-918 | SSRF | URL 검증, 사설 IP 차단 |
사용자가 지정한 언어에 맞게 시큐어 코딩 프롬프트를 생성합니다:
templates/ai-security/developer.md와 references/ai-security/overview.md를 참조하여 AI 특화 시큐어 코딩 프롬프트를 생성합니다.
| 위협 | 방어 방법 |
|---|---|
| Prompt Injection | 입출력 필터링, 시스템/사용자 프롬프트 분리, 가드레일 |
| 데이터 중독 | 이상치 탐지, 데이터 무결성 검증, 적대적 훈련 |
| 모델 추출 | 쿼리 제한, 출력 제한, 워터마킹, 차등 프라이버시 |
| 민감 정보 노출 | 출력 필터링, PII 마스킹, 학습 데이터 정제 |
| 적대적 예제 | 적대적 훈련, 입력 전처리, 앙상블 방어 |
| LLM 탈옥 | 콘텐츠 필터링, 안전 가드레일, 출력 모니터링 |
templates/robot-security/overview.md를 먼저 읽고, 목적에 따라 ssdf.md, supply-chain.md, iec62443.md, cyber-resilience.md, wireless.md를 참조하여 로봇 특화 시큐어 코딩 프롬프트를 생성합니다.
references/secure-coding/overview.md에서 7개 카테고리와 49개 CWE 매핑을 참조합니다. references/secure-coding/pseudocode.md에서 언어 무관 패턴(46항목, UNSAFE/SAFE 쌍)을 참조합니다. 언어별 프롬프트는 templates/secure-coding/javascript.md(Express.js, Sequelize, Node.js) 또는 templates/secure-coding/python.md(Django, Flask, SQLAlchemy)를 사용합니다.
templates/secure-coding/javascript.mdtemplates/secure-coding/python.mdreferences/secure-coding/pseudocode.md (AI가 패턴 적응)references/secure-coding/pseudocode.mdreferences/zero-trust/overview.md에서 ZT 아키텍처를, references/zero-trust/maturity-model.md에서 성숙도 정의를 참조합니다. templates/zero-trust/overview.md에서 평가 가이드를 참조합니다. 핵심요소별 템플릿을 기반으로 ZT 구현 프롬프트를 생성합니다. OT/ICS 환경은 templates/zero-trust/ot-environment.md와 references/zero-trust/ot-guide.md를 참조합니다.
| 주제 | reference 파일 |
|---|---|
| 개요 | templates/zero-trust/overview.md |
| 식별자 및 디바이스 | templates/zero-trust/identity-device.md |
| 네트워크 및 시스템 | templates/zero-trust/network-system.md |
| 애플리케이션 및 데이터 | templates/zero-trust/app-data.md |
| 가시성 및 자동화 | templates/zero-trust/visibility-automation.md |
| OT/ICS 환경 | templates/zero-trust/ot-environment.md |
| ZT 아키텍처 참조 | references/zero-trust/overview.md |
| 성숙도 모델 상세 | references/zero-trust/maturity-model.md |
| OT 배포 가이드 | references/zero-trust/ot-guide.md |
8개 핵심요소, ~396개 항목, 4단계 성숙도. 표준: KISA 제로트러스트 가이드라인 2.0, NIST SP 800-207, CISA ZT Maturity Model.
관련 프롬프트를 복사하여 AI 어시스턴트 대화에 붙여넣은 후 코드 작성을 요청하세요.
[여기에 시큐어 코딩 요구사항 붙여넣기]
이제 Python/FastAPI로 사용자 등록 엔드포인트를 구현해주세요.© cdppcorp, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 74 other files (scripts, references) in skills-ko/kesekit-guide-ko of cdppcorp/KESE-KIT.
Open the folder on GitHubat commit cd118f9
Kesekit Guide Ko next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Kesekit Guide Ko this skillcdppcorp/KESE-KIT | 361 | — | ~1.3k | Automated safety check: Pass | MIT | |
| Security Auditoreigent-ai/eigent | 15k | — | ~1.8k | Automated safety check: Notes | Apache-2.0 | |
| Security Verification Gatefengshao1227/ccg-workflow | 5.9k | — | ~621 | Automated safety check: Notes | MIT | |
| Code Review Securitynicepkg/auto-company | 192 | 1 repos | ~3.9k | Automated safety check: Pass | MIT | |
| Cyber NeoHainrixz/cyber-neo | 281 | — | ~5.9k | Automated safety check: Warn | MIT | |
| Codex Reviewsuyuan2022/suyuan-skill | 276 | — | ~3.5k | Automated safety check: Warn | MIT |
eigent-ai/eigent
Audits source code, dependencies and config files for vulnerabilities and hardcoded secrets, using two bundled Python scanners and an OWASP Top 10 checklist.
fengshao1227/ccg-workflow
Scans code with a bundled Node script for injection, secrets, XSS and other risky patterns, ranks findings by severity and checks that security decisions are documented.
nicepkg/auto-company
Security-focused code review checklist and automated scanning patterns.
Hainrixz/cyber-neo
Comprehensive cybersecurity analysis for any local project. An agent skill from Hainrixz/cyber-neo.
suyuan2022/suyuan-skill
Dual-model code review via Codex CLI. An agent skill from suyuan2022/suyuan-skill.
getsentry/warden
Finds exploitable application security vulnerabilities in code changes.
cdppcorp/KESE-KIT
Run a pre-deployment security compliance checklist based on KISA guidelines.
cdppcorp/KESE-KIT
KISA 가이드라인 기반 배포 전 보안 컴플라이언스 체크리스트를 실행합니다. An agent skill from cdppcorp/KESE-KIT.
cdppcorp/KESE-KIT
Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems.
cdppcorp/KESE-KIT
보안 취약점 자동 수정 및 하드닝 스크립트를 생성합니다. An agent skill from cdppcorp/KESE-KIT.
cdppcorp/KESE-KIT
Generate secure coding prompts and guides for AI tools (Claude, ChatGPT, Cursor, Copilot).
cdppcorp/KESE-KIT
Run a security vulnerability assessment based on KISA guidelines.
Categories
AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다. Kesekit Guide Ko is an agent skill from cdppcorp/KESE-KIT. AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다.
Kesekit Guide Ko fits situations like: tasks that involve Web application vulnerabilities.
Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a claude-code`. Or copy the skill folder (skills-ko/kesekit-guide-ko in cdppcorp/KESE-KIT) into .claude/skills/kesekit-guide-ko in your project. Claude Code loads it when a task matches its description.
Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a codex`. Or copy the skill folder (skills-ko/kesekit-guide-ko in cdppcorp/KESE-KIT) into .agents/skills/kesekit-guide-ko in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cdppcorp/KESE-KIT --skill kesekit-guide-ko -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kesekit-guide-ko, .gemini/skills/kesekit-guide-ko, .github/skills/kesekit-guide-ko and .opencode/skills/kesekit-guide-ko in your project.
SKILL.md names no scripts, command-line tools or credentials: Kesekit Guide Ko is instructions for the agent only. Our summary lists: Node.js.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
Kesekit Guide Ko is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.3k tokens (SKILL.md is roughly 5.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 15k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Kesekit Guide Ko: Security Auditor (eigent-ai/eigent, 15k stars), Security Verification Gate (fengshao1227/ccg-workflow, 5.9k stars), Code Review Security (nicepkg/auto-company, 192 stars) and Cyber Neo (Hainrixz/cyber-neo, 281 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
cdppcorp (a GitHub organization) maintains it in cdppcorp/KESE-KIT, which has 361 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on April 9, 2026.
Source: cdppcorp/KESE-KIT on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.