跳到主要内容
知知仓学习社ZHICANG

cred-omega

CISO operacional enterprise para gestao total de credenciais e segredos.

读凭据严重 16 · 高危 0sickn33/agentic-awesome-skills

它会碰到什么

扫了多少2 个文本文件，28 KB
它会碰到什么读凭据
命中总数16 处
命中统计严重 16 · 高 0 · 中 0 · 低 0
逐条看命中（16 条严重或高危）
  • 严重 references/detailed-guide.md:21cred-paths
    1. **DESCOBRIR** — Encontrar onde estao (ou poderiam estar) segredos: codigo, .env, commits antigos, CI/CD, containers, logs, backups, variaveis, paineis de pro
  • 严重 references/detailed-guide.md:57cred-paths
    | SSH/TLS Keys | .pem, .p12, .key, id_rsa | CRITICA |
  • 严重 references/detailed-guide.md:70cred-paths
    - `.env`, `.env.local`, `.env.production`, `.env.development`
  • 严重 references/detailed-guide.md:70cred-paths
    - `.env`, `.env.local`, `.env.production`, `.env.development`
  • 严重 references/detailed-guide.md:70cred-paths
    - `.env`, `.env.local`, `.env.production`, `.env.development`
  • 严重 references/detailed-guide.md:70cred-paths
    - `.env`, `.env.local`, `.env.production`, `.env.development`
  • 严重 references/detailed-guide.md:114cred-paths
    [ ] Secret management atual: .env? Vault? Secret Manager? Nenhum?
  • 严重 references/detailed-guide.md:141cred-paths
    -name ".env" -o -name ".env.*" -o -name "*.pem" -o -name "*.p12" \
  • 严重 references/detailed-guide.md:141cred-paths
    -name ".env" -o -name ".env.*" -o -name "*.pem" -o -name "*.p12" \
  • 严重 references/detailed-guide.md:144cred-paths
    -o -name "id_rsa*" -o -name "*.keystore" \
  • 严重 references/detailed-guide.md:244cred-paths
    rg -n "\.env" .github/workflows/ Jenkinsfile .gitlab-ci.yml 2>/dev/null
  • 严重 references/detailed-guide.md:752cred-paths
    /.env.production     # Segredos (chmod 600)
  • 严重 references/detailed-guide.md:771cred-paths
    - .env com chmod 600, owner root
  • 严重 references/detailed-guide.md:795cred-paths
    - Se detectar .env sendo commitado → bloquear e orientar .gitignore
  • 严重 references/detailed-guide.md:802cred-paths
    - Arquivos .env sendo criados sem .gitignore correspondente
  • 严重 references/detailed-guide.md:803cred-paths
    - Docker commands que copiam .env para dentro da image

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

CRED-OMEGA: Security Engine for All API Keys (Enterprise)

Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

When to Use This Skill

  • When you need specialized assistance with this domain

Do Not Use This Skill When

  • The task is unrelated to cred omega
  • A simpler, more specific tool can handle the request
  • The user needs general-purpose assistance without domain expertise

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库sickn33/agentic-awesome-skills
星标★ 46,490
本站分层T1
该仓技能数6676
原文件路径plugins/agentic-awesome-skills/skills/cred-omega/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 6676 个技能

同名技能的其他版本

有 3 个不同仓库或目录里都有叫 cred-omega 的技能。它们内容并不相同，别混用：