[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6C2EMV72AWYA4CGSYYBHCWE":3,"skill-same:01M6C2EMV72AWYA4CGSYYBHCWE":109},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":51,"linkOnly":52,"markdownContent":53,"markdownBody":54,"frontMatter":55,"refName":79,"commitSha":80,"skillDirectory":81,"forksCount":82,"repositoryHtmlUrl":83,"repositoryHomepageUrl":84,"ownerHtmlUrl":85,"ownerBlogUrl":86,"ownerDescription":87,"updatedAt":88,"install":89,"resources":102},"01M6C2EMV72AWYA4CGSYYBHCWE","committer-2fa-audit",null,"Audit source-control organization settings for strong 2FA\u002FMFA requirements across all committers","jmagly\u002Faiwg","jmagly","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1159087?v=4","01M6C10AK8N2WCSQN11FYGTJWN","Joseph Magly","01M6C10AQ8A2RMED1Y1BSVY7NF",229,"MIT","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Fskills\u002Fcommitter-2fa-audit\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50],"audit","committer","committer 2fa audit","settings","when","source","org","false","token","efficiency","across","organization","tracker","only","never","github","read","haiku","history","Bash","shell","recovery","mfa","admin","report","status","security","2026-11-10 10:12:30",false,"---\nnamespace: aiwg\nname: committer-2fa-audit\nplatforms: [all]\ndescription: Audit source-control organization settings for strong 2FA\u002FMFA requirements across all committers\nrequires:\n  - tracker-platform: github or gitea\n  - token: org-admin token when querying member 2FA status\nensures:\n  - report: committer 2FA enforcement status and platform setting guidance\nerrors:\n  - token-missing: org-admin token required for platform member audit\n  - unsupported-platform: selected tracker does not expose 2FA enrollment status\ninvariants:\n  - tokens are never printed, written, or passed through shell history\n  - recovery codes are never requested\ncommandHint:\n  argumentHint: \"[--platform github|gitea] [--org \u003Cname>] [--report-only]\"\n  allowedTools: Read, Bash\n  model: haiku\n  category: security\n  orchestration: false\n  modelRole: efficiency\n  modelTier: economy\n---\n\n# Committer 2FA Audit\n\nAudit whether all committers are covered by strong two-factor authentication policy. This enforces `committer-2fa-required` and maps curl Practice 25 into source-control governance.\n\n## GitHub\n\nRequires an org-admin token supplied outside the prompt context. Query the org member endpoint with the 2FA-disabled filter and report non-compliant users.\n\n## Gitea\n\nGitea support is instance-dependent. When the API exposes 2FA status, report non-compliant users. When it does not, report the configured organization\u002Fsite policy and mark member-level visibility as unavailable.\n\n## Token Handling\n\nFollow `token-security`: read tokens from a secure environment or secret manager, do not echo them, do not paste them into issue comments, and do not persist audit responses containing token material.\n\n## References\n\n- `agentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Frules\u002Fcommitter-2fa-required.md`\n- `agentic\u002Fcode\u002Faddons\u002Faiwg-utils\u002Frules\u002Ftoken-security.md`\n","# Committer 2FA Audit\n\nAudit whether all committers are covered by strong two-factor authentication policy. This enforces `committer-2fa-required` and maps curl Practice 25 into source-control governance.\n\n## GitHub\n\nRequires an org-admin token supplied outside the prompt context. Query the org member endpoint with the 2FA-disabled filter and report non-compliant users.\n\n## Gitea\n\nGitea support is instance-dependent. When the API exposes 2FA status, report non-compliant users. When it does not, report the configured organization\u002Fsite policy and mark member-level visibility as unavailable.\n\n## Token Handling\n\nFollow `token-security`: read tokens from a secure environment or secret manager, do not echo them, do not paste them into issue comments, and do not persist audit responses containing token material.\n\n## References\n\n- `agentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Frules\u002Fcommitter-2fa-required.md`\n- `agentic\u002Fcode\u002Faddons\u002Faiwg-utils\u002Frules\u002Ftoken-security.md`\n",{"name":5,"errors":56,"ensures":61,"requires":64,"namespace":69,"platforms":70,"invariants":72,"commandHint":75,"description":7},[57,59],{"token-missing":58},"org-admin token required for platform member audit",{"unsupported-platform":60},"selected tracker does not expose 2FA enrollment status",[62],{"report":63},"committer 2FA enforcement status and platform setting guidance",[65,67],{"tracker-platform":66},"github or gitea",{"token":68},"org-admin token when querying member 2FA status","aiwg",[71],"all",[73,74],"tokens are never printed, written, or passed through shell history","recovery codes are never requested",{"model":41,"category":50,"modelRole":33,"modelTier":76,"allowedTools":77,"argumentHint":78,"orchestration":52},"economy","Read, Bash","[--platform github|gitea] [--org \u003Cname>] [--report-only]","main","6754967c344ccb087a8de06972f55a41067b291b","agentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Fskills\u002Fcommitter-2fa-audit",36,"https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg","https:\u002F\u002Faiwg.io","https:\u002F\u002Fgithub.com\u002Fjmagly","https:\u002F\u002Fintegrolabs.io","ml\u002Fai, industrial automation, safety\u002Fsecurity, ssi\r\n\r\nmagly.net\r\nintegrolabs.io\r\naiwg.io\r\nfortemi.com\r\npagenary.com\r\nbytecask.com","2026-11-11 08:11:25",{"source":8,"skillName":5,"commands":90,"prompt":100,"zipAvailable":101},[91,94,97],{"tool":92,"command":93},"npx","npx skills add jmagly\u002Faiwg --skill committer-2fa-audit",{"tool":95,"command":96},"bunx","bunx skills add jmagly\u002Faiwg --skill committer-2fa-audit",{"tool":98,"command":99},"pnpm","pnpm dlx skills add jmagly\u002Faiwg --skill committer-2fa-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Fskills\u002Fcommitter-2fa-audit\u002FSKILL.md",true,[103],{"path":104,"resourceType":105,"resourceTypeDesc":106,"sizeBytes":107,"sourceHtmlUrl":108},"assets\u002Fbrowser-check.md","ASSET","资产文件",460,"https:\u002F\u002Fgithub.com\u002FOyadotAI\u002Foya-browser\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Foya-browser\u002Fassets\u002Fbrowser-check.md",[110,133,157,163,170,184],{"skillNo":111,"name":112,"nameZh":6,"description":113,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":114,"categories":115,"keywords":117,"publishedAt":51},"01M70QA0BSYJ49EES9V4RE8QH1","host-hardening","Read-only system hardening baseline and plan-first host hardening recommendations for SSH, Docker bind addresses, firewall persistence, datastores, exporters and audit retention.","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fplugins\u002Fsecurity-engineering\u002Fskills\u002Fhost-hardening\u002FSKILL.md",[116],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[118,119,120,40,121,122,123,124,125,126,43,127,37,128,24,38,129,130,131,132],"host","host hardening","hardening","re","recommendations","remediation","plan","port","verification","access","retention","firewall","bind","secrets","request",{"skillNo":134,"name":135,"nameZh":6,"description":136,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":137,"categories":138,"keywords":143,"publishedAt":51},"01M70PNT2Z4HMZPRBTAF6073NN","exposure-analysis","Read-only firewall analysis and effective host exposure reconstruction for Docker published ports, UFW bypass, stale rules, CDN scope, IPv6 asymmetry and external probe allowlists.","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fplugins\u002Fforensics\u002Fskills\u002Fexposure-analysis\u002FSKILL.md",[139,142],{"categoryNo":140,"categoryName":141,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[144,145,146,40,147,125,148,149,43,150,118,151,37,152,153,38,129,154,155,156],"exposure analysis","analysis","unknown","credentials","collection","ufw","ports","internet","local","scope","reconstruction","operator","write",{"skillNo":158,"name":112,"nameZh":6,"description":113,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":159,"categories":160,"keywords":162,"publishedAt":51},"01M70P8QATMPKA78E4FT5D2TNA","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fframeworks\u002Fsecurity-engineering\u002Fskills\u002Fhost-hardening\u002FSKILL.md",[161],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[120,118,119,127,40,132,123,122,24,124,125,126,43,131,37,128,121,38,129,130],{"skillNo":164,"name":135,"nameZh":6,"description":136,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":165,"categories":166,"keywords":169,"publishedAt":51},"01M70NMPVJ5H0JH131P60FW4R8","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Fagentic\u002Fcode\u002Fframeworks\u002Fforensics-complete\u002Fskills\u002Fexposure-analysis\u002FSKILL.md",[167,168],{"categoryNo":140,"categoryName":141,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[145,144,38,147,125,148,43,146,118,151,37,152,153,40,129,150,149,154,155,156],{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":174,"categories":175,"keywords":177,"publishedAt":51},"01M6CB4DDR0B4NNCFK7ZK7449H","fixture-skill","Exercise rule delivery.","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Frule-delivery\u002Fskills\u002Ffixture-skill\u002FSKILL.md",[176],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[178,179,180,181,182,183],"fixture skill","fixture","rule","delivery","true","exercise",{"skillNo":185,"name":186,"nameZh":6,"description":187,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":188,"categories":189,"keywords":191,"publishedAt":51},"01M6CB4AVK1W76MFMPP0JP32CJ","pi-local","Pi-local duplicate-precedence fixture.","https:\u002F\u002Fgithub.com\u002Fjmagly\u002Faiwg\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Fproviders\u002Fpi\u002Fproject\u002F.pi\u002Fskills\u002Fpi-local\u002FSKILL.md",[190],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[192,193,152,194,179],"pi","pi local","duplicate"]