GitHub
xxe-testing
Validate XML External Entity (XXE) injection vulnerabilities including file disclosure, SSRF, denial of service, and blind XXE via out-of-band channels. Test by injecting malicious XML with external entity refe...
☆ 252查看技能
测试与安全 AI 技能
发现 测试与安全 相关 Skills，比较来源仓库和用途，查看适合你工作流的技能说明。
分类目录: 测试与安全
测试与安全 清除筛选
全部技能
GitHub
command-injection-testing
Validate OS Command Injection vulnerabilities including direct command injection, blind command injection via time delays, and out-of-band command execution. Test by injecting shell metacharacters and commands...
☆ 252查看技能
GitHub
sql-injection-testing
Validate SQL injection vulnerabilities (including blind SQLi) across time-based, error-based, boolean-based, UNION-based, stacked-query, and out-of-band patterns. Use when testing CWE-89 (SQL Injection), CWE-56...
☆ 252查看技能
GitHub
nosql-injection-testing
Validate NoSQL injection vulnerabilities across MongoDB, Cassandra, CouchDB, Redis, and other NoSQL databases. Test operator injection, JavaScript injection, and query manipulation patterns. Use when testing CW...
☆ 252查看技能
GitHub
style-harmonizer
De-slot and harmonize paper voice across `sections/*.md` without changing meaning or citation keys. **Trigger**: style harmonizer, de-template stems, remove slot phrases, discourse stems, 写作风格统一, 去槽位句...
☆ 250查看技能
GitHub
analyzing-agentica-library
This skill provides a way to retrieve information from the Agentica library for analysis and decision-making.
☆ 246查看技能
GitHub
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, ge...
☆ 246查看技能
GitHub
authorization-testing
Validate authorization failures including IDOR, privilege escalation, and missing access controls. Test by attempting unauthorized access with lower-privileged credentials. Use when testing CWE-639 (IDOR), CWE-...
☆ 244查看技能
GitHub
injection-testing
Validate miscellaneous injection vulnerabilities NOT covered by dedicated skills. Covers SSTI, LDAP, XPath, XQuery, CRLF/HTTP Header, Email Header, GraphQL, Expression Language (EL/OGNL), JSON/JavaScript eval i...
☆ 244查看技能
GitHub
agentic-security-threat-modeling
Identify agentic AI security threats based on OWASP Top 10 for Agentic Applications 2026. Use when analyzing AI agents, LLM-powered applications, chatbots, auto-reply systems, tool-using AI, browser automation,...
☆ 244查看技能
GitHub
malware-analysis
Professional malware analysis workflow for PE executables and suspicious files. Triggers on file uploads with requests like "analyze this malware", "analyze this sample", "what does this executable do", "check...
☆ 244查看技能
GitHub
analysing-attack
Analyse Mitre ATT&CK tactics, techniques and sub-techniques. Use when performing analysis of threat detections, threat models, security risks or cyber threat intelligence
☆ 244查看技能
GitHub
windows-intrusion-timeline-targeted
Create a targeted intrusion timeline for a Windows incident using whatever artifacts are available (event logs, EDR, SIEM exports, triage notes).
☆ 244查看技能
GitHub
suspicious-powershell-hunt-cross-platform-ideas
Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.
☆ 244查看技能
GitHub
initial-incident-intake-scoping
First-hour intake checklist + questions that produce an actionable scope and evidence plan.
☆ 244查看技能
GitHub
feature-run
Executes unattended batch processing of all pending tasks with autonomous decision-making. Use when running all tasks automatically, batch processing without supervision, completing entire feature backlog, or w...
☆ 243查看技能
GitHub
feature-next
Implements a single task following the next → implement → check → done workflow with TDD support. Use when working on one specific task, implementing a single feature from the backlog, or following TDD red-gree...
☆ 243查看技能
GitHub
project-analyze
Scans codebases to generate architecture documentation (ARCHITECTURE.md). Use when joining an existing project, understanding codebase structure, exploring project architecture, or preparing for agent-foreman i...
☆ 243查看技能
GitHub
foreman-spec
Multi-role requirement analysis and task breakdown workflow using 4 specialized AI agents (PM, UX, Tech, QA). Each agent conducts web research before analysis to gather industry best practices, case studies, an...
☆ 243查看技能
GitHub
init-harness
Creates AI agent task management structure with feature backlog (ai/tasks/), TDD enforcement, and progress tracking. Use when setting up agent-foreman, initializing feature-driven development, creating task bac...
☆ 243查看技能
GitHub
linear
Linear issue tracking integration - Create, update, and manage Linear issues and projects using the GraphQL API
☆ 243查看技能
GitHub
architect
Design systems, plan implementations, review architecture decisions - Use when you need to plan a complex feature, design system architecture, or make high-level technical decisions.
☆ 243查看技能
GitHub
coder
Write, edit, and refactor code with full tool access - Use when you need to actually write or modify code, create files, run commands, or implement features.
☆ 243查看技能
GitHub
explorer
Quickly search and navigate the codebase - Use when you need to quickly find files, search for patterns, or locate specific code without deep analysis.
☆ 243查看技能
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库，同一仓库的多个技能可能共享相同数值；它反映仓库关注度，不代表单个技能的安装量或质量评分。