break
通过 Bash 调用 BREAK 搜索脚本,查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例,并基于关联知识回答安全问题。
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and privacy change reviews.
Translate privacy principles and legal requirements into data-flow, lifecycle, acceptance, and verification artifacts. Map data classification, purpose, processing, access, retention, deletion, residency, and consent; define verifiable privacy acceptance criteria; and produce data-lifecycle records, retention/deletion verification plans, and privacy change reviews. Use when engineering privacy into a system, feature, or data flow — not for legal advice, jurisdiction-specific regulatory interpretation, or replacing security engineering or incident response.
evals/evals.json
JSON
Other
README.md
Markdown
Other
templates/data-flow-and-access-map.md
Markdown
Other
templates/data-lifecycle-record.md
Markdown
Other
templates/privacy-acceptance-criteria.md
Markdown
Other
templates/privacy-change-review.md
Markdown
Other
templates/retention-deletion-verification-plan.md
Markdown
Reference
references/discovery-brief.md
Markdown
SKILL.md
SKILL.md
Markdown
通过 Bash 调用 BREAK 搜索脚本,查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例,并基于关联知识回答安全问题。
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…
Audits iOS and macOS projects for excessive permission requests and data collection, including full photo library or contacts access, background location, and undeclared device id…