caching
Diagnose Stale Data and Plan Cache Policies
Conflicting cache policies can delay updates and expose personalized content through shared caches. This skill guides HTTP freshness, revalidation, and invalidation decisions across cache layers.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "caching" from https://skillstore.io/skills/shreyam1008-caching.md and its manifest at https://skillstore.io/api/skills/shreyam1008-caching/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"caching" ์ฌ์ฉ ์ค์ ๋๋ค. Our content-hashed JavaScript files change URLs on every release. How should we cache them?
์์ ๊ฒฐ๊ณผ:
- Use a one-year freshness window and immutable caching for content-hashed assets.
- Serve each changed asset under a new URL.
- Keep HTML freshness short or require revalidation so clients receive updated asset references.
"caching" ์ฌ์ฉ ์ค์ ๋๋ค. Users still see old HTML after deployment. Which cache should we check?
์์ ๊ฒฐ๊ณผ:
- Inspect Cache-Control, ETag, Age, and CDN cache-hit headers on the HTML response.
- Check whether a service worker returns an older Cache Storage entry.
- Identify the stale layer before applying a CDN purge or service worker cache update.
"caching" ์ฌ์ฉ ์ค์ ๋๋ค. Can we use the same shared cache policy for a public catalog and account details?
์์ ๊ฒฐ๊ณผ:
- Allow shared caching only for public, non-personalized catalog responses within acceptable freshness limits.
- Use private caching for suitable personalized responses and no-store for sensitive data.
- Apply explicit service worker exclusions and account cleanup because Cache Storage does not enforce HTTP no-store.
๋ณด์ ๊ฐ์ฌ
์์ All 21 static findings are false positives: Markdown formatting, documentation links, and a conceptual cache description do not establish execution or reconnaissance. The skill provides caching guidance and explicitly addresses sensitive data, shared caches, and service worker exclusions. No evidence found of prompt injection, credential exfiltration, or other intent-level security threats.
์ํ ์์ธ
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (19)
๐ ๋คํธ์ํฌ ์ ๊ทผ (1)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/shreyam1008-caching/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/shreyam1008-caching?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/shreyam1008-caching?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-caching/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/shreyam1008-caching.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
shreyam1008. (2026). caching security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-caching/audits/1BibTeX ์ธ์ฉ
@techreport{shreyam1008-shreyam1008-caching-2026,
author = {shreyam1008},
title = {caching security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/shreyam1008-caching/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "caching security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-caching/audits/1"
identifiers:
- type: other
value: "skillstore:shreyam1008-caching:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Resolve stale releases
Investigate stale HTML and asset references across browser, service worker, and CDN caches after a deployment.
Protect personalized API responses
Separate public data from personalized or sensitive responses and choose appropriate cache storage and revalidation policies.
Plan CDN freshness and invalidation
Define shared-cache freshness windows and compare content versioning with purge strategies for deployment and data updates.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
Explain max-age, s-maxage, no-cache, and no-store for my [resource type]. Recommend a policy based on [freshness requirement] and [data sensitivity].
Review cache policies for [hashed assets], [HTML], and [API responses]. Use [current headers] to identify freshness, revalidation, and privacy issues.
Diagnose stale content after [deployment or mutation]. Use [response headers], [service worker behavior], and [CDN observations] to prioritize checks for each cache layer.
Design caching for [application] with [freshness limits] and [account boundaries]. Address hashed URLs, CDN invalidation, conditional requests, and service worker exclusions.
๋ชจ๋ฒ ์ฌ๋ก
- Classify resources by URL stability, acceptable staleness, and data sensitivity before choosing cache directives.
- Use content-hashed asset URLs and keep HTML fresh enough to discover new versions.
- Inspect every relevant cache layer and explicitly exclude sensitive data from service worker storage.
ํผํ๊ธฐ
- Applying public shared-cache policies to personalized or sensitive responses.
- Treating no-cache as a prohibition on storage or assuming Cache Storage enforces no-store.
- Using immutable caching for changing resources whose URLs remain unchanged.
์์ฃผ ๋ฌป๋ ์ง๋ฌธ
Which AI tools support this skill?
Does this skill configure my CDN automatically?
What is the difference between no-cache and no-store?
When should I use immutable caching?
Does HTTP no-store prevent service worker Cache Storage entries?
Does this skill include complete TanStack Query or service worker workflows?
๊ฐ๋ฐ์ ์ธ๋ถ ์ ๋ณด
์์ฑ์
shreyam1008๋ผ์ด์ ์ค
MIT
Skillstore ๋ฆฌ๋น์
r1
๋ฒ์ ์๋ด
์์ฑ์๊ฐ ๋ฒ์ ์ ์ ์ธํ์ง ์์์ต๋๋ค.
๋ฆฌํฌ์งํ ๋ฆฌ
https://github.com/shreyam1008/shre-skills/tree/ba9787f41c2fe1be1062eeb6322bc339a1026383/skills/caching์ฐธ์กฐ
bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5
์ ์ง๋ณด์ ์ต์ ์ฑ
2026. 10. 2.
์ฌ์ฉ๋
0 ๋ค์ด๋ก๋ ยท 0 ์กฐํ
ํ์ผ ๊ตฌ์กฐ
๐ SKILL.md