「trust」の検索結果

Deploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management. Use when implementing enterprise-grade SASE with integrated ZTNA/SWG/CASB/FWaaS, replacing both VPN and branch firewalls with cloud-delivered security, or integrating ZTNA with an existing Palo Alto NGFW estate.

日本語の概要は準備中です。原文の説明を表示しています。

Deploys and configures Tailscale (or self-hosted Headscale) as a WireGuard-based zero trust mesh VPN, setting up identity-aware ACLs, exit nodes, subnet routers, and MagicDNS for encrypted peer-to-peer connectivity. Use when replacing traditional VPN servers with an identity-authenticated mesh network or enforcing granular per-device access control lists.

日本語の概要は準備中です。原文の説明を表示しています。

Configure AWS Verified Access to provide VPN-less zero trust network access to internal apps, combining identity trust providers (IAM Identity Center, Okta/OIDC), device posture providers (CrowdStrike, Jamf), Cedar policy authoring, and Terraform deployment. Use when replacing VPN access with ZTNA, writing Cedar access policies, or deploying Verified Access instances, groups, and endpoints across AWS accounts.

日本語の概要は準備中です。原文の説明を表示しています。

Deploys Cloudflare Access with Cloudflare Tunnel for zero trust access to self-hosted apps, configuring identity-aware policies, device posture checks, and WARP client enrollment as a VPN replacement. Use when replacing VPN with Cloudflare One, exposing internal apps without open inbound ports, or securing contractor/third-party access to specific applications.

日本語の概要は準備中です。原文の説明を表示しています。

Evaluate a skill against the Legal Skill Design Framework — thirteen design parameters (including trust-surface, freshness, schema validation, and conflict detection), three legal failure modes, and a three-band verdict (Ready / Some Concern / Material Concerns). Use when deciding whether to trust a community skill before installing it, before deploying a first-party skill to your team, or whenever the user asks "should I trust this?" or "is this skill well-designed?". Runs automatically as part of /legal-builder-hub:skill-installer.

日本語の概要は準備中です。原文の説明を表示しています。

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only). INVOKES: shell (powershell or bash), edit, create, ask_user for guided repo setup.

日本語の概要は準備中です。原文の説明を表示しています。

Check AI output before you trust or use it — where it's likely wrong, what to verify, and how to catch confident-sounding errors. Use when asked can I trust this AI answer, how do I verify what AI told me, fact-check this AI output, or is this AI response reliable. Produces a risk read on the specific output (the claims most likely to be wrong or made up), the parts that need independent verification vs the parts that are low-risk, how to actually verify each, the tells of AI hallucination and overconfidence, and a habit for building verification into your AI use — because AI is confidently wrong often enough that unchecked trust is a real risk.

日本語の概要は準備中です。原文の説明を表示しています。

Make an AI agent or automation reliable enough to trust — the tests, checks, and guardrails that catch its failures before they reach anything real. Use when asked how do I test my AI agent, make my automation reliable, my agent works sometimes, or how do I trust an AI workflow in production. Produces a map of where the agent can fail (bad input, hallucination, wrong tool call, edge cases, silent errors), the checks that catch each (validation, evals on real cases, human-in-the-loop gates, monitoring), a right-sized reliability plan scaled to the stakes, and a rollout that earns trust incrementally.

日本語の概要は準備中です。原文の説明を表示しています。

Discover OPC UA servers, connect MATLAB clients, and browse/navigate server nodes using opcuaserverinfo, the Local Discovery Service (LDS), opcua, connect, setSecurityModel, certificate-trust functions, findNodeById, opcuanode, and Namespace/Children traversal. Use when finding OPC UA servers on the network, querying endpoints and security policies, connecting to a server, authenticating with username/password or certificates, configuring security modes, handling certificate-trust or hostname-mismatch errors, troubleshooting failed connections or empty discovery, inspecting an OPC UA certificate (.der/.pem), browsing an address space, finding nodes by name or NodeId, navigating node hierarchies, invoking method nodes, or batch-processing large namespaces. Trigger on: opcuaserverinfo, LDS, opcua, opc.ua.Client, setSecurityModel, opc.ua.trustServerCertificate, OPC UA certificate, findNodeById, opcuanode, browse OPC UA, find node, OPC UA namespace, OPC UA method node, Industrial Communication Toolbox.

日本語の概要は準備中です。原文の説明を表示しています。

When the user wants to improve E-E-A-T, add trust signals, or optimize for expertise and authority. Also use when the user mentions "E-E-A-T," "E-E-A-T signals," "experience expertise authority trust," "author bio," "YMYL," "trust signals," "expertise signals," "authority signals," "citations," "references," or "credibility." For headings, use heading-structure.

日本語の概要は準備中です。原文の説明を表示しています。

Deprecated compatibility entry for Trust Signals construction. This component is now maintained in Bricks; install and use component-builder to build a new Trust Signals.

日本語の概要は準備中です。原文の説明を表示しています。

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only). INVOKES: shell (powershell or bash), edit, create, ask_user for guided repo setup.

日本語の概要は準備中です。原文の説明を表示しています。

The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.

日本語の概要は準備中です。原文の説明を表示しています。

Guides SOC 2 Type II Privacy Trust Services Criteria preparation and audit execution. Covers AICPA TSP Section 100 Privacy criteria P1-P8 including notice, choice/consent, collection, use/retention/disposal, access, disclosure, security, and quality. Includes evidence collection, control testing, and report review. Keywords: SOC 2, privacy criteria, TSP, AICPA, Type II, trust services.

日本語の概要は準備中です。原文の説明を表示しています。

Implements automated PII discovery and classification using tools like Microsoft Purview, BigID, OneTrust DataDiscovery, and AWS Macie. Covers scanning schedules, accuracy tuning, false positive management, and integration patterns. Keywords: data discovery, PII scanning, Purview, BigID, Macie, OneTrust, automated classification, data cataloging.

日本語の概要は準備中です。原文の説明を表示しています。

When things go wrong - and they will - how you communicate determines whether you lose customers for a day or lose trust forever. Crisis communications isn't about spin or damage control. It's about being human when your company is at its most vulnerable. This skill covers incident response communications, public apologies, data breach notifications, service outages, PR crises, and the aftermath. The goal isn't to look good - it's to be good, and communicate that clearly. Use when "crisis, incident, outage, down, breach, apology, we messed up, customers are angry, PR disaster, viral complaint, status page, postmortem, trust recovery, bad press, crisis, incident, communications, apology, trust, status-page, outage, breach, postmortem, recovery" mentioned.

日本語の概要は準備中です。原文の説明を表示しています。

侍酒师与葡萄酒 (侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统，从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。) Master OS — automated mastery of 侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统，从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on 侍酒师 / 葡萄酒 (Sommelier & Wine) — 葡萄酒鉴赏 + 侍酒服务的职业认知操作系统，从业者/侍酒师/学习者视角。覆盖: (a) 两大认证体系张力 — WSET (Wine & Spirit Education Trust, 英国, 知识+SAT 系统化品鉴方法, Diploma/L4 笔试导向) vs Court of Master Sommeliers (CMS, 美/英, 服务+盲品演绎法+理论三位一体, MS 头衔), 外加 Institute of Masters of Wine (MW, 学术研究+论文) 与 UC Davis 葡萄酒学/葡萄栽培学学院派; (b) 盲品 = 纯 tacit 校准技能 — 演绎品鉴网格 (deductive tasting: 看色/闻香/品味 → 结构线索 calculated structure → 推断品种/产区/年份/酒龄), WSET SAT vs CMS deductive grid 两套方法论; (c) 第一性张力 — codifiable 理论层 (产区/品种/酒法/风土/酿造/葡萄栽培) ⇄ tacit 校准层 (品鉴味觉记忆/盲品/侍酒服务), 这行的核心矛盾是「可背诵的知识」与「不可言传的味觉」之间; (d) 旧世界 vs 新世界框架 — 旧世界以风土/法定产区为组织原则 (AOC/DOCG/QbA 分级法), 新世界以品种为标签; 风土 (terroir) 是核心组织概念; (e) 侍酒服务/酒店层 — 餐厅 floor 的配餐 (food pairing)、醒酒/侍酒温度、酒单与酒窖管理、by-the-glass 与饮品项目经济学、盲品 service exam; (f) 葡萄酒商业层 — 三级分销体系 (美国 three-tier)、定价/配额 (allocation)、期酒 (en primeur)、投资酒 (Liv-ex) 与拍卖; (g) 智识/品味演进 — 帕克百分制 (Robert Parker / Wine Advocate 100-point) vs Jancis Robinson 20 分制散文派; 经典派 vs 现代派酿造; 自然酒/低干预 (natural/minimal-intervention) vs 传统技术派. 学派分歧: WSET 知识体系派 vs CMS 服务盲品派、旧世界风土派 vs 新世界品种/技术派、自然酒派 vs 传统派、百分制点评派 vs 散文叙述派、经典平衡派 vs 浓郁现代派. 不含: 家庭自酿 DIY 套件、纯调酒/鸡尾酒/烈酒、葡萄园重型农机工程、酒精成瘾/公共卫生政策、酒类电商运营纯营销。 problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词：「侍酒师」「sommelier」「葡萄酒」「wine」「盲品」

日本語の概要は準備中です。原文の説明を表示しています。

GitHub 解封 — 账号封禁/限制/恢复的领域操作系统。覆盖：(a) GitHub 官方政策体系 (TOS / 可接受使用政策 / Trust & Safety 执行模式 / 公开申诉路径 / 受制裁地区解读)；(b) 封号原因诊断学 (spam / abuse / 制裁误标 / 2FA 丢失 / ToS 违规 / 账号劫持误判 / ban evasion 等子类型 + 症状→原因映射 + 自我分诊压测)；(c) 申诉实操 craft (写一封能让 T&S 快速判误伤的英文申诉信 + 升级阶梯 + 法务介入边界 + Don'ts)；(d) 制裁与合规硬边界 (OFAC SDN 名单 / 哪些国家或地区真不可达 / VPN 误判路径 / 中国大陆不是美国制裁地区的反复重申)；(e) 中国大陆开发者特别处境 (sanctioned region 误标 + SMS 验证不支持 +86/+852 + Gitee/GitLab/Codeberg/JihuLab 备用迁移 + 私有自托管 Gitea/Forgejo)；(f) 真实案例库 (~30+ 公开案例分类拆解：误伤 / 真违规 / 制裁误标三类各自赔率与申诉成功路径)。伦理锚绝不软化：不教 ban evasion / 不教撒谎式申诉 / 真违规承认改进 / 丢 2FA 无恢复因子则诚实告知 / 中国制裁误标靠申诉不靠换 VPN / 申诉 6 个月窗口必算清 / 约 3% (业内估) 真违规恢复 vs 约 79% (业内估) 误伤申诉成功率分层标。 (GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: false-positive / genuine violation / sanctions mis-flag, each with win-rate and appeal success path). Ethical anchors absolutely not softened: do NOT teach ban evasion (creating new accounts turns a temp ban into a permanent one — the single biggest mistake); do NOT teach social engineering or lying in appeals (misuse + actually confirms violation); genuine violations: admit + improve beats denial; lost 2FA + no recovery factor → do not pretend recovery is possible; China sanctioned-region mis-flag → fix via appeal, not repeated VPN switching; appeal form 6-month window must be counted carefully; historical 约 3% (业内估) genuine-violation recovery vs 约 79% (业内估) false-positive appeal success rate stratification must be honestly labeled. Anti-samples (explicitly describe harm, never endorse): developer permabanned for ban evasion / open-source team org-banned for personal attacks in public issues / cases where repeated VPN switching escalated risk-control severity.) Master OS — automated mastery of GitHub Account Reinstatement — the domain operating system for GitHub (and analogous platform) account suspension, restriction, appeal, and recovery. Covers: (a) GitHub official policy architecture (TOS / Acceptable Use Policies / Trust & Safety enforcement patterns / public appeals pathways / sanctioned-region interpretation); (b) suspension-cause diagnostics (spam / abuse / sanctions mis-flag / 2FA loss / ToS violation / account hijack false-positive / ban evasion taxonomy + symptom→cause mapping + self-triage pressure test); (c) appeal craft (writing an English appeal letter that gets T&S to fast-track a false-positive ruling + escalation ladder + legal-engagement boundary + Don'ts); (d) sanctions and compliance hard boundaries (OFAC SDN list / which countries/regions are truly unreachable / VPN false-positive paths / China is NOT a US-sanctioned region — repeated emphasis); (e) mainland China developer special circumstances (sanctioned-region mis-flag + SMS verification does not support +86/+852 + Gitee/GitLab/Codeberg/JihuLab fallback migration + self-hosted Gitea/Forgejo); (f) real-case library (~30+ public cases with categorized analysis: fa

日本語の概要は準備中です。原文の説明を表示しています。

Prepare a meeting-ready estate and tax brief for a household — opens with what was discussed and actioned since the last meeting (Wealthbox/Redtail/Salesforce), pulls the estate plan from Wealth.com (structure, key documents and whether each is signed, balance sheet) plus the prior-year tax look-back and that year's tax constants, and cross-checks it against how accounts are titled and beneficiaried at the custodian and portfolio platforms (Schwab, Orion/Addepar, iCapital) — surfacing unfunded trusts, titling mismatches, and beneficiary gaps as a prioritized flags list. The only write is creating advisor-approved follow-up tasks in the CRM (optional, approved first). Never drafts trust language, gives legal advice, retitles an account, or changes a beneficiary. Triggers on "estate brief", "estate meeting brief", "estate and tax brief", "estate plan review for [client]", "check [client]'s trust funding", "are [client]'s beneficiaries up to date", or "does [client]'s estate plan match their accounts".

日本語の概要は準備中です。原文の説明を表示しています。

Expert guide for Zero-Trust Secret Management (Infisical, HashiCorp Vault, Doppler), automated API key rotation, and environment security / Panduan ahli manajemen rahasia Zero-Trust, rotasi kunci API, dan keamanan variabel lingkungan.

日本語の概要は準備中です。原文の説明を表示しています。

Use this skill when the user wants the full existing-registry Trust Magnitude inspector: understand why a named Gaia skill has a particular star rank, what its Trust Magnitude (TM) score is, which evidence rows are contributing (or dead), how far it is from the next grade, or what evidence to add to move the needle. Also use when asked for a full leaderboard of all named skills ranked by TM. Triggers: "why does X have 3 stars", "what's the TM for X", "inspect TM", "explain the score for X", "what evidence would rank up X", "show leaderboard", "rank all skills by TM", "what's dragging down X's score", "dead evidence rows", "how close is X to grade A/S".

日本語の概要は準備中です。原文の説明を表示しています。

Use when configuring Remote Site Settings to allow Apex callouts to external URLs, or distinguishing them from CSP Trusted Sites for Lightning component resource loading. NOT for storing an endpoint and its auth as a Named Credential — use integration/named-credentials-setup. NOT for allow-listing a URL the browser itself loads (script, iframe, fetch) — use security/csp-and-trusted-urls.

日本語の概要は準備中です。原文の説明を表示しています。

Drafts privilege-protective, board-ready executive summary memoranda of internal antitrust investigation findings for US federal law. Covers monopolization, vertical restraints, acquisitions, FTC Act Section 5, tech-platform conduct, risk assessment, and remediation. Use when drafting antitrust investigation summaries, board memos on competition risk, or internal compliance investigation reports.

日本語の概要は準備中です。原文の説明を表示しています。

The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.

日本語の概要は準備中です。原文の説明を表示しています。