break

通过 Bash 调用 BREAK 搜索脚本,查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例,并基于关联知识回答安全问题。

JDArmy/BREAK ★ 383
business security risk assessment threat intelligence incident cases

wpegpt-analyzer

Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…

WPeace-HcH/WPeGPT-Analyzer ★ 101
reverse engineering binary analysis ida pro malware analysis

binary-analysis

Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.

magnus919/agent-skills ★ 88
binary analysis reverse engineering static analysis ghidra

privacy-engineering

Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…

magnus919/agent-skills ★ 88
privacy data-lifecycle retention deletion

secure-software-engineering

Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…

magnus919/agent-skills ★ 88
secure coding threat modeling authentication authorization

pace-plan

Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…

magnus919/agent-skills ★ 88
pace planning emergency communications resilience contingency planning

crowdsec

Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…

magnus919/agent-skills ★ 88
crowdsec cscli intrusion prevention waf

security-audit-methodology

Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…

magnus919/agent-skills ★ 88
security audit threat modeling vulnerability assessment security architecture

ai-data-disclosure

Audits iOS and macOS projects for undisclosed transmission of user data to third-party AI services, checking consent UI, privacy policy disclosures, and sensitive data handling ag…

cruisediary/apple-app-review-skills ★ 18
ios macos privacy ai

account-deletion-check

Audits iOS and macOS projects for compliant in-app account deletion, including deletion UI, backend removal, deactivation-only flows, and Sign in with Apple credential revocation.

cruisediary/apple-app-review-skills ★ 18
account deletion apple app review privacy ios

permission-scope-audit

Audits iOS and macOS projects for over-broad location, photo library, and contacts permissions, recommending narrower or privacy-preserving APIs and reporting file locations and l…

cruisediary/apple-app-review-skills ★ 18
ios macos privacy permissions

data-minimization-audit

Audits iOS and macOS projects for excessive permission requests and data collection, including full photo library or contacts access, background location, and undeclared device id…

cruisediary/apple-app-review-skills ★ 18
data minimization privacy ios macos

content-moderation-api

Audits iOS, macOS, and cross-platform projects for missing user-generated content moderation integrations and contact mechanisms required by Apple Guideline 1.2.

cruisediary/apple-app-review-skills ★ 18
content moderation ugc apple review guideline 1.2

ugc-safety-features

Audits iOS and macOS projects with user-generated content for missing reporting, blocking, filtering, contact, terms, and age-safety mechanisms under Apple Guideline 1.2.

cruisediary/apple-app-review-skills ★ 18
ugc apple app review guideline 1.2 content moderation