Security
88
break
通过 Bash 调用 BREAK 搜索脚本，查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例，并基于关联知识回答安全问题。
Security
permission-scope-audit
Audits iOS and macOS projects for over-broad location, photo library, and contacts permissions, recommending narrower or privacy-preserving APIs and reporting file locations and line numbers.
★ 18
GitHub Stars
88
Quality score
1
Files
About this Skill
Detects over-broad permission requests where a narrower permission or privacy-preserving alternative API is sufficient, violating Guideline 5.1.1(iii) data minimization requirements.
Use cases
- Audit location authorization scope
- Detect unnecessary full photo library access
- Identify excessive contacts permissions
- Check location entitlement consistency
- Prepare App Store privacy compliance findings
Features
- Scans Swift and Objective-C source files
- Checks Always versus When-In-Use location authorization
- Detects full photo library access without PHPickerViewController
- Detects contacts access where CNContactPickerViewController may suffice
- Produces prioritized findings with file paths and line numbers
Supported Agents
Skill files
Related Skills
Security
82
wpegpt-analyzer
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
Security
96
binary-analysis
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
Security
95
privacy-engineering
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…
Security
94
secure-software-engineering
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…
Security
94
pace-plan
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
Security
92
crowdsec
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
Security
90
security-audit-methodology
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…