发现优质的 AI Agent 技能
聚合 Claude Skills、LangChain、AutoGPT 等优质资源，助力开发者快速构建智能应用
Metaprogramming Traps
- `define_method` — captures closure, be careful with loop variables - `eval` string — security risk, avoid with user input - `class_eval` vs `instance_eval` — class_eval defines instance methods, instance_eval defines singleton - `const_get` with user input — can access any constant, security risk - `method(:name)` — raises NameError if method doesn't exist
Cycle Privacy Guidelines
Reference only — critical security practices.
Security Traps
- `process.env` values are strings — `PORT=3000` is `"3000"`, parseInt needed - Missing env var is `undefined` — no error, check explicitly on startup - `eval()` with user input — remote code execution - `exec(userInput)` — command injection, use `execFile` with args array - Path traversal — `../../../etc/passwd`, validate with `path.resolve` + prefix check
Hardening and Disaster Recovery
Use this playbook for security baselines and outage recovery planning.
Security and Disputes - Mercado Libre
Use this file for account safety, risky transactions, and claim or dispute handling.
Linux Gotchas
- `chmod 777` fixes nothing, breaks everything — find the actual owner/group issue - Setuid on scripts is ignored for security — only works on binaries - `chown -R` follows symlinks outside target directory — use `--no-dereference` - Default umask 022 makes files world-readable — set 077 for sensitive systems - ACLs override traditional permissions silently — check with `getfacl`