Results for “block-public-access”

Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker — edges as text in one file per ticket locally, or native blocking links on a real tracker.

Install and configure Pi-hole as a network-wide DNS ad blocker on a Raspberry Pi or Linux host, manage blocklists, set up DNS-over-HTTPS, integrate DHCP, create local DNS records, and troubleshoot DNS issues.

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

Protect APIs from abuse and resource exhaustion by implementing rate limiting with token bucket, sliding window, and fixed window algorithms using Redis-backed counters, API gateway plugins, or application middleware.

Discover hidden directories, files, APIs, and administrative interfaces by enumerating URLs and testing authentication enforcement during authorized security assessments.

Breaks a plan, spec, or conversation into tracer-bullet tickets that declare their blocking edges, published to the configured tracker. Use when the user says "break this into tickets" or wants a plan decomposed into vertical slices.

Click-by-click instructions for manual blockers — DNS, OAuth, signups, and other GUI-dependent tasks

Searches the internet via BrowserAct API when direct web access is restricted, extracting and structuring research data from multiple sources.

Intercepts responses to let users choose the depth and token budget before answering, with heuristic token estimation and preset depth levels.

Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmed security breach, using network segmentation, endpoint isolation, credential revocation, and access control modifications.

Provides Rust code patterns for building blocking HTTP clients with ureq, including request construction, response handling, SSE streaming, and timeouts.

Lock any ERC-20 token on Base for GitHub-gated vesting, linking wallet and repo to release tokens on verified pushes.

Manage a Public.com brokerage account: view portfolios, quotes, orders, and history, and place trades via the Public.com API.

Restrict file edits to a specific directory for the session. Blocks Edit and Write outside the allowed path. Use when debugging to prevent accidentally "fixing" unrelated code, or when you want to scope changes to one module. Use when asked to "freeze", "restrict edits", "only edit this folder", or "lock down edits". (gstack)

Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them.

API Security (Minimal)

Drafts concise, truthful English appeals for GitHub account restrictions, tailored to the user's situation and GitHub Support form fields.

Design and deploy Salesforce restriction rules to subtract record access from users, covering eligibility, criteria syntax, metadata shape, and documented enforcement gaps.

Configures Salesforce scoping rules to set a default filtered view of records in list views, reports, and SOQL without removing user access.

Forces web searches and reading of official docs before implementing, integrating, or debugging third-party APIs, libraries, and services to ensure accuracy and avoid guesswork.

Restrict file edits to a specific directory for the session. (gstack)

Detect and prevent public-over-private name resolution in npm, PyPI, and Maven dependency manifests.

Manage Discord channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Discord channel.

docblock-rewrite - Plain-English Comment Rewriter

Extract a bounded part of the invoking codebase into a new GitHub repository with private and public-OSS readiness gates

Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.

Post to X (Twitter) using the official API with OAuth 1.0a. Use when you need to tweet, post updates, or publish content. Bypasses rate limits and bot detection that affect cookie-based approaches like bird CLI.

Adds input and output guardrails to an agent, including validation, content filtering, domain scoping, and rate limiting, with TypeScript examples and wiring instructions.

Restrict file edits to a specific directory for the session. (gstack)

Design a visual protest action that generates media coverage for a cause without requiring budget or platform access.

Enumerate Active Directory service accounts, request Kerberos TGS tickets, and crack them offline to assess password strength and privilege escalation paths.

Least privilege is easy to state and hard to hold: grant each identity only the

Manage Discord channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Discord channel.

Breaks a plan, spec, or PRD into independently-grabbable issues using tracer-bullet vertical slices, then publishes them to the project issue tracker.

Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.