exploit-researcher
Exploit researcher persona specializing in attack surface analysis, exploit scenario generation, and vulnerability chaining
浏览 jpoley 维护的已发布 AI 技能,比较用途与说明,并通过来源仓库了解安装方式。
已收录技能
16收录技能的仓库 Stars 合计
192仓库 Forks
16平均每个技能的仓库 Stars
12同一仓库中的多个技能可能共享 Stars,合计包含重复仓库数据。
Exploit researcher persona specializing in attack surface analysis, exploit scenario generation, and vulnerability chaining
Use when generating security patches, fixing vulnerabilities, or creating code remediation for security findings. Invoked for automated fix generation, patch creation, and vulnerability remediation.
Use when creating PRDs or PRPs to populate the Gotchas/Prior Failures section. Reads learning files from memory/learnings and matches entries based on file paths, keywords, or tags. Returns curated list suitabl...
Use when parsing "All Needed Context" sections from PRD files. Extracts code files, docs, examples, gotchas, and external systems into structured JSON format. Invoked by /flow:implement, /flow:generate-prp, and...
Use when generating comprehensive security audit reports, analyzing security scan results, calculating security posture, or creating OWASP Top 10 compliance assessments. Invoked for security reporting, vulnerab...
Use when creating, editing, or breaking down backlog tasks. Invoked for task management, feature decomposition, writing acceptance criteria, and ensuring tasks follow atomic, testable, independent guidelines.
Security analyst persona with deep OWASP expertise, vulnerability classification, risk assessment, and compliance mapping
Use when making architecture decisions, creating ADRs, designing system components, evaluating technology choices, or planning technical implementations. Invoked for system design, scalability analysis, and pla...
Use when explaining or applying Spec-Driven Development workflow, guiding through SDD phases, or helping with workflow decisions. Invoked for methodology guidance, workflow optimization, and best practices.
Validates constitution status before executing /flowspec commands. Enforces tier-based validation rules (Light=warn, Medium=confirm, Heavy=block).
Fuzzing strategist persona specializing in dynamic testing guidance, fuzzing strategy development, and crash analysis
Use when creating backlog tasks from security findings, integrating security scans into workflow states, or managing security remediation tracking. Invoked for security workflow integration and task automation.
Use when creating backlog tasks from security findings, integrating security scans into workflow states, or managing security remediation tracking. Invoked for security workflow integration and task automation.
Use when creating test plans, reviewing test coverage, defining quality gates, writing E2E test scenarios, or validating acceptance criteria. Invoked for quality assurance, testing strategy, and verification ac...
Patch engineer persona focused on security fix quality, code correctness, testing strategies, and regression prevention
Use when reviewing code for security vulnerabilities, conducting threat modeling, ensuring SLSA compliance, or performing security assessments. Invoked for security analysis, vulnerability detection, and compli...
默认按已收录数据中的 GitHub 仓库 Stars 排序。Stars 属于来源仓库,同一仓库的多个技能可能共享相同数值;它反映仓库关注度,不代表单个技能的安装量或质量评分。