安全
88
break
通过 Bash 调用 BREAK 搜索脚本，查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例，并基于关联知识回答安全问题。
安全
security-audit-methodology
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing guidance.
★ 88
GitHub Stars
90
质量评分
7
文件
关于此 Skill
Plan authorized security reviews with threat modeling, architecture and dependency audits, and vulnerability classification. Use for scoped defensive security assessment. Do not use for offensive operations, unauthorized testing, or security control implementation.
使用场景
- Modeling system attack surfaces and trust boundaries
- Reviewing authentication, authorization, and session management
- Assessing dependencies, SBOMs, CVEs, and license risks
- Classifying vulnerabilities by severity and exploitability
- Planning scoped, authorized security assessments
功能
- STRIDE, attack tree, and data-flow analysis guidance
- Security architecture review coverage for identity, access, sessions, and secrets
- Dependency and supply-chain audit guidance
- CVSS, CWE, severity triage, and exploitability assessment
- Authorization and defensive safety boundaries
支持的 Agent
Skill 文件
Other
evals/evals.json
JSON
Other
README.md
Markdown
Reference
references/security-architecture-dependency-audit.md
Markdown
Reference
references/source-index.md
Markdown
Reference
references/threat-modeling.md
Markdown
Reference
references/vulnerability-classification.md
Markdown
SKILL.md
SKILL.md
Markdown
相关 Skills
安全
82
wpegpt-analyzer
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
安全
96
binary-analysis
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
安全
95
privacy-engineering
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…
安全
94
secure-software-engineering
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidenc…
安全
94
pace-plan
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
安全
92
crowdsec
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
安全
88
account-deletion-check
Audits iOS and macOS projects for compliant in-app account deletion, including deletion UI, backend removal, deactivation-only flows, and Sign in with Apple credential revocation.