보안
88
break
通过 Bash 调用 BREAK 搜索脚本，查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例，并基于关联知识回答安全问题。
보안
ai-data-disclosure
Audits iOS and macOS projects for undisclosed transmission of user data to third-party AI services, checking consent UI, privacy policy disclosures, and sensitive data handling against Apple Guideline 5.1.2(i).
★ 18
GitHub Stars
88
품질 점수
1
파일
이 Skill 소개
Detects apps that send user data to third-party AI systems without explicit in-app consent and disclosure, enforcing Guideline 5.1.2(i).
사용 사례
- Audit AI SDK and endpoint integrations
- Check for explicit in-app AI consent
- Verify privacy policy AI disclosures
- Identify sensitive data sent to AI services
- Generate prioritized App Store compliance findings
기능
- Detects third-party AI SDKs and API endpoints
- Checks for consent and disclosure UI patterns
- Verifies AI-related privacy policy language
- Flags sensitive data combined with external AI
- Produces findings with severity, file paths, and line numbers
지원 Agent
Skill 파일
관련 Skills
보안
82
wpegpt-analyzer
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
보안
96
binary-analysis
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
보안
95
privacy-engineering
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…
보안
94
secure-software-engineering
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…
보안
94
pace-plan
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
보안
92
crowdsec
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
보안
90
security-audit-methodology
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…