[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EP7RFNCMEARYPXQJM6PYYD":3,"skill-same:01M6EP7RFNCMEARYPXQJM6PYYD":85},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":36,"commitSha":37,"skillDirectory":38,"forksCount":39,"repositoryHtmlUrl":40,"repositoryHomepageUrl":41,"ownerHtmlUrl":42,"ownerBlogUrl":6,"ownerDescription":43,"updatedAt":44,"install":45,"resources":58},"01M6EP7RFNCMEARYPXQJM6PYYD","security-audit",null,"Security review or audit of code, architecture, or infrastructure - Threat modeling sessions - Reviewing PRs for security implications","ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30],"security","audit","security audit","review","threat modeling","sessions","architecture","security review","infrastructure","code","threat","modeling","2026-11-10 10:12:30",false,"---\nname: security-audit\ndescription: Security review or audit of code, architecture, or infrastructure - Threat modeling sessions - Reviewing PRs for security implications\n---\n\n# Security Researcher\n\nSenior-grade security review guidelines anchored on canonical control frameworks: NIST CSF 2.0, CIS Controls v8, NIST SSDF, OWASP ASVS, OWASP Top 10, MITRE ATT&CK, SLSA, and OpenSSF Scorecard.\n\n## When to Use\n\n- Security review or audit of code, architecture, or infrastructure\n- Threat modeling sessions\n- Reviewing PRs for security implications\n- Assessing supply chain security\n- Smart contract or ZK circuit security reviews\n\n## Frameworks Reference\n\n| Framework            | Purpose                       |\n| -------------------- | ----------------------------- |\n| NIST CSF 2.0         | Org-wide risk outcomes        |\n| CIS Controls v8      | Practical enterprise controls |\n| NIST SSDF SP 800-218 | Secure development lifecycle  |\n| OWASP ASVS           | App security requirements     |\n| OWASP Top 10 (2025)  | Common web app failures       |\n| MITRE ATT&CK         | Adversary techniques mapping  |\n| SLSA + OpenSSF       | Supply chain integrity        |\n\n## Non-Negotiables\n\nBefore any deep review, verify these fundamentals:\n\n1. **Asset inventory** - Systems, repos, secrets locations, dependencies, owners\n2. **MFA everywhere** - Hardware keys for admins, no shared accounts\n3. **Patch management** - Continuous vuln scanning (OS, containers, deps)\n4. **Centralized logging** - Auth, privilege changes, egress, CI\u002FCD, key access\n5. **Tested backups** - Restore drills, immutable where possible\n6. **Incident response** - Runbooks, on-call, break-glass procedures\n\n## Review Methodology\n\n### 1. Threat Model First\n\nUse STRIDE categories:\n\n- **S**poofing - Can attacker impersonate?\n- **T**ampering - Can data be modified?\n- **R**epudiation - Can actions be denied?\n- **I**nformation disclosure - Data leaks?\n- **D**enial of service - Availability attacks?\n- **E**levation of privilege - Unauthorized access?\n\nDocument for each trust boundary:\n\n- Auth strategy\n- Data classification\n- Rate limits\n- Audit requirements\n\n**Assume compromise review:**\n\n- If one service key leaks, what's the blast radius?\n- If one dependency is malicious, what stops it?\n\n### 2. Identity & Access (Root Cause #1)\n\nBroken access control is the most common vulnerability.\n\nCheck:\n\n- Default-deny authorization (by resource, not just endpoint)\n- Short-lived sessions, secure cookies, CSRF protection\n- Separation: authentication ≠ authorization ≠ accounting\n- Step-up auth for high-risk actions\n- RBAC\u002FABAC with explicit admin boundaries\n\nProtect against:\n\n- Credential stuffing (rate limits, breached password checks)\n- Account takeover (MFA, risky-login alerts)\n- Session fixation\u002Freplay (rotation, binding, nonce\u002Fjti)\n\n### 3. Secrets & Keys\n\n- **No secrets in git** - Pre-receive hooks, CI secret detectors\n- **Dedicated KMS\u002FHSM** - Least privilege, rotate keys\n- **Environment separation** - Dev\u002Fstage\u002Fprod with separate creds\n- **Short-lived credentials** - OIDC to cloud, not static keys\n- **Track usage** - Who\u002Fwhat accessed, from where, when\n- **Compromise playbook** - Rotate, revoke, invalidate, postmortem\n\n### 4. Cryptography\n\n- Use modern primitives (AEAD, not raw AES modes)\n- Never roll your own crypto\n- CSPRNG for randomness (no time-based seeds)\n- Unique nonces where required\n- Constant-time ops for secret-dependent paths\n- Domain separation for hashes\n- Passwords: argon2\u002Fbcrypt\u002Fscrypt, per-user salt\n\n### 5. Input Handling & Injection\n\n- Strict allowlists, schema validation at boundaries\n- Parameterized queries (no string concatenation)\n- Contextual output encoding (HTML\u002FJS\u002FURL)\n- SSRF prevention: egress allowlists, metadata IP blocks\n- Deserialization: avoid unsafe deserializers, type allowlists\n- File uploads: content-type defense, store outside web root\n\n### 6. Infrastructure\n\n- Asset inventory + secure baseline (golden images)\n- Patch SLAs with emergency path\n- Network segmentation (prod ≠ CI\u002FCD ≠ corp)\n- mTLS for service-to-service\n- Rate limits, quotas, circuit breakers\n- No public admin panels (VPN + MFA + IP allowlists)\n\n### 7. CI\u002FCD & Supply Chain\n\nProtect the build pipeline like prod:\n\n- Least privilege runners\n- Secrets only in protected contexts\n- Reviews for workflow changes\n\nDependencies:\n\n- Pin versions, verify integrity, monitor CVEs\n- Remove abandoned libs\n\nSupply chain:\n\n- Signed build provenance\n- OpenSSF Scorecard checks\n- SLSA levels adoption\n\n### 8. Detection & Response\n\nLog with context:\n\n- Auth events, privilege changes, key access\n- Config changes, CI\u002FCD events, unusual egress\n\nProtect logs:\n\n- Append-only\u002Fimmutable, restricted access\n\nAlerting:\n\n- Brute force, impossible travel, new admin grants\n- Anomalous token use\n\nReadiness:\n\n- Tabletop exercises, forensic snapshots, kill switches\n- Post-incident RCA, patch bug classes\n\n### 9. Verification\n\n- Code review with security checklists\n- SAST + dependency + secret scanning in CI\n- DAST for critical surfaces\n- Fuzzers on parsers, codecs, serialization\n- Abuse case testing (rate limits, replay, permission boundaries)\n- External audits for high-risk components\n- Bug bounty when mature\n\n## Blockchain\u002FSmart Contract Specifics\n\n### Protocol & Contracts\n\n- **Invariant-first design** - Define safety properties, check continuously\n- **Upgradeability** - Timelocks, emergency pause, clear admin key story\n- **Oracle\u002Fbridge threats** - Assume counterpart compromise, minimize trust\n- **Economic attacks** - MEV, sandwiching, griefing, liquidity manipulation\n- **Replay protection** - Chain-id, contract address, nonce, EIP-712\n- **Key custody** - Multisig, HSM, threshold signing\n\n### ZK Circuits\u002FProvers\n\n- **Soundness** - Constraints fully bind witness, no unchecked values\n- **Transcript binding** - All public inputs in Fiat-Shamir transcript\n- **Range\u002Foverflow** - Explicit range constraints, no wrap assumptions\n- **Challenges** - Derive from transcript, never external mutable sources\n- **Trusted setup** - Ceremony hygiene, reproducible parameters\n- **Side-channels** - Constant-time for secrets, isolate prover infra\n\n## Operationalization\n\n1. **Pick baselines**: CIS v8 + NIST SSDF + OWASP ASVS\n2. **Map to ATT&CK**: What you can't detect, redesign\n3. **Supply chain**: SLSA + Scorecard for repos\n4. **Loop**: Threat model → Controls → Test → Monitor → Drills\n\n## Output Format\n\nWhen conducting a review, structure findings as:\n\n```text\n## Finding: [Title]\n**Severity**: Critical \u002F High \u002F Medium \u002F Low \u002F Info\n**Category**: [STRIDE category or framework reference]\n**Location**: [File:line or component]\n\n### Description\n[What's wrong]\n\n### Impact\n[What could happen]\n\n### Recommendation\n[How to fix]\n\n### References\n[Framework links, CVE, etc.]\n```\n\nSee `references\u002F` for detailed checklists by domain.\n","# Security Researcher\n\nSenior-grade security review guidelines anchored on canonical control frameworks: NIST CSF 2.0, CIS Controls v8, NIST SSDF, OWASP ASVS, OWASP Top 10, MITRE ATT&CK, SLSA, and OpenSSF Scorecard.\n\n## When to Use\n\n- Security review or audit of code, architecture, or infrastructure\n- Threat modeling sessions\n- Reviewing PRs for security implications\n- Assessing supply chain security\n- Smart contract or ZK circuit security reviews\n\n## Frameworks Reference\n\n| Framework            | Purpose                       |\n| -------------------- | ----------------------------- |\n| NIST CSF 2.0         | Org-wide risk outcomes        |\n| CIS Controls v8      | Practical enterprise controls |\n| NIST SSDF SP 800-218 | Secure development lifecycle  |\n| OWASP ASVS           | App security requirements     |\n| OWASP Top 10 (2025)  | Common web app failures       |\n| MITRE ATT&CK         | Adversary techniques mapping  |\n| SLSA + OpenSSF       | Supply chain integrity        |\n\n## Non-Negotiables\n\nBefore any deep review, verify these fundamentals:\n\n1. **Asset inventory** - Systems, repos, secrets locations, dependencies, owners\n2. **MFA everywhere** - Hardware keys for admins, no shared accounts\n3. **Patch management** - Continuous vuln scanning (OS, containers, deps)\n4. **Centralized logging** - Auth, privilege changes, egress, CI\u002FCD, key access\n5. **Tested backups** - Restore drills, immutable where possible\n6. **Incident response** - Runbooks, on-call, break-glass procedures\n\n## Review Methodology\n\n### 1. Threat Model First\n\nUse STRIDE categories:\n\n- **S**poofing - Can attacker impersonate?\n- **T**ampering - Can data be modified?\n- **R**epudiation - Can actions be denied?\n- **I**nformation disclosure - Data leaks?\n- **D**enial of service - Availability attacks?\n- **E**levation of privilege - Unauthorized access?\n\nDocument for each trust boundary:\n\n- Auth strategy\n- Data classification\n- Rate limits\n- Audit requirements\n\n**Assume compromise review:**\n\n- If one service key leaks, what's the blast radius?\n- If one dependency is malicious, what stops it?\n\n### 2. Identity & Access (Root Cause #1)\n\nBroken access control is the most common vulnerability.\n\nCheck:\n\n- Default-deny authorization (by resource, not just endpoint)\n- Short-lived sessions, secure cookies, CSRF protection\n- Separation: authentication ≠ authorization ≠ accounting\n- Step-up auth for high-risk actions\n- RBAC\u002FABAC with explicit admin boundaries\n\nProtect against:\n\n- Credential stuffing (rate limits, breached password checks)\n- Account takeover (MFA, risky-login alerts)\n- Session fixation\u002Freplay (rotation, binding, nonce\u002Fjti)\n\n### 3. Secrets & Keys\n\n- **No secrets in git** - Pre-receive hooks, CI secret detectors\n- **Dedicated KMS\u002FHSM** - Least privilege, rotate keys\n- **Environment separation** - Dev\u002Fstage\u002Fprod with separate creds\n- **Short-lived credentials** - OIDC to cloud, not static keys\n- **Track usage** - Who\u002Fwhat accessed, from where, when\n- **Compromise playbook** - Rotate, revoke, invalidate, postmortem\n\n### 4. Cryptography\n\n- Use modern primitives (AEAD, not raw AES modes)\n- Never roll your own crypto\n- CSPRNG for randomness (no time-based seeds)\n- Unique nonces where required\n- Constant-time ops for secret-dependent paths\n- Domain separation for hashes\n- Passwords: argon2\u002Fbcrypt\u002Fscrypt, per-user salt\n\n### 5. Input Handling & Injection\n\n- Strict allowlists, schema validation at boundaries\n- Parameterized queries (no string concatenation)\n- Contextual output encoding (HTML\u002FJS\u002FURL)\n- SSRF prevention: egress allowlists, metadata IP blocks\n- Deserialization: avoid unsafe deserializers, type allowlists\n- File uploads: content-type defense, store outside web root\n\n### 6. Infrastructure\n\n- Asset inventory + secure baseline (golden images)\n- Patch SLAs with emergency path\n- Network segmentation (prod ≠ CI\u002FCD ≠ corp)\n- mTLS for service-to-service\n- Rate limits, quotas, circuit breakers\n- No public admin panels (VPN + MFA + IP allowlists)\n\n### 7. CI\u002FCD & Supply Chain\n\nProtect the build pipeline like prod:\n\n- Least privilege runners\n- Secrets only in protected contexts\n- Reviews for workflow changes\n\nDependencies:\n\n- Pin versions, verify integrity, monitor CVEs\n- Remove abandoned libs\n\nSupply chain:\n\n- Signed build provenance\n- OpenSSF Scorecard checks\n- SLSA levels adoption\n\n### 8. Detection & Response\n\nLog with context:\n\n- Auth events, privilege changes, key access\n- Config changes, CI\u002FCD events, unusual egress\n\nProtect logs:\n\n- Append-only\u002Fimmutable, restricted access\n\nAlerting:\n\n- Brute force, impossible travel, new admin grants\n- Anomalous token use\n\nReadiness:\n\n- Tabletop exercises, forensic snapshots, kill switches\n- Post-incident RCA, patch bug classes\n\n### 9. Verification\n\n- Code review with security checklists\n- SAST + dependency + secret scanning in CI\n- DAST for critical surfaces\n- Fuzzers on parsers, codecs, serialization\n- Abuse case testing (rate limits, replay, permission boundaries)\n- External audits for high-risk components\n- Bug bounty when mature\n\n## Blockchain\u002FSmart Contract Specifics\n\n### Protocol & Contracts\n\n- **Invariant-first design** - Define safety properties, check continuously\n- **Upgradeability** - Timelocks, emergency pause, clear admin key story\n- **Oracle\u002Fbridge threats** - Assume counterpart compromise, minimize trust\n- **Economic attacks** - MEV, sandwiching, griefing, liquidity manipulation\n- **Replay protection** - Chain-id, contract address, nonce, EIP-712\n- **Key custody** - Multisig, HSM, threshold signing\n\n### ZK Circuits\u002FProvers\n\n- **Soundness** - Constraints fully bind witness, no unchecked values\n- **Transcript binding** - All public inputs in Fiat-Shamir transcript\n- **Range\u002Foverflow** - Explicit range constraints, no wrap assumptions\n- **Challenges** - Derive from transcript, never external mutable sources\n- **Trusted setup** - Ceremony hygiene, reproducible parameters\n- **Side-channels** - Constant-time for secrets, isolate prover infra\n\n## Operationalization\n\n1. **Pick baselines**: CIS v8 + NIST SSDF + OWASP ASVS\n2. **Map to ATT&CK**: What you can't detect, redesign\n3. **Supply chain**: SLSA + Scorecard for repos\n4. **Loop**: Threat model → Controls → Test → Monitor → Drills\n\n## Output Format\n\nWhen conducting a review, structure findings as:\n\n```text\n## Finding: [Title]\n**Severity**: Critical \u002F High \u002F Medium \u002F Low \u002F Info\n**Category**: [STRIDE category or framework reference]\n**Location**: [File:line or component]\n\n### Description\n[What's wrong]\n\n### Impact\n[What could happen]\n\n### Recommendation\n[How to fix]\n\n### References\n[Framework links, CVE, etc.]\n```\n\nSee `references\u002F` for detailed checklists by domain.\n",{"name":5,"description":7},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":8,"skillName":5,"commands":46,"prompt":56,"zipAvailable":57},[47,50,53],{"tool":48,"command":49},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill security-audit",{"tool":51,"command":52},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill security-audit",{"tool":54,"command":55},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill security-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002FSKILL.md",true,[59,65,69,73,77,81],{"path":60,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":63,"sourceHtmlUrl":64},"references\u002Fcrypto-checklist.md","REFERENCE","参考文档",2668,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Freferences\u002Fcrypto-checklist.md",{"path":66,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":67,"sourceHtmlUrl":68},"references\u002Fsmart-contract-checklist.md",3414,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Freferences\u002Fsmart-contract-checklist.md",{"path":70,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":71,"sourceHtmlUrl":72},"references\u002Fsupply-chain-checklist.md",3305,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Freferences\u002Fsupply-chain-checklist.md",{"path":74,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":75,"sourceHtmlUrl":76},"references\u002Fwebapp-checklist.md",3750,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Freferences\u002Fwebapp-checklist.md",{"path":78,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":79,"sourceHtmlUrl":80},"references\u002Fzk-checklist.md",3096,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Freferences\u002Fzk-checklist.md",{"path":82,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":83,"sourceHtmlUrl":84},"skill-report.json",11147,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Faiskillstore\u002Fmarketplace\u002Fclementwalter\u002Fsecurity-audit\u002Fskill-report.json",[86,100,110,119,125,132],{"skillNo":87,"name":88,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":96,"publishedAt":31},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[91],{"categoryNo":92,"categoryName":93,"taxonomyType":94,"taxonomyTypeDesc":95},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[97,98,99],"model","model hierarchy","model hierarchy skill",{"skillNo":101,"name":102,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":103,"categories":104,"keywords":106,"publishedAt":31},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[105],{"categoryNo":92,"categoryName":93,"taxonomyType":94,"taxonomyTypeDesc":95},[107,108,109],"MCP","zoom","zoom mcp",{"skillNo":111,"name":112,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":113,"categories":114,"keywords":115,"publishedAt":31},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[116,117,118,108],"sdk","zoom apps sdk","apps",{"skillNo":120,"name":121,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":122,"categories":123,"keywords":124,"publishedAt":31},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[121],{"skillNo":126,"name":127,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":131,"publishedAt":31},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[130],{"categoryNo":92,"categoryName":93,"taxonomyType":94,"taxonomyTypeDesc":95},[127],{"skillNo":133,"name":134,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":137,"publishedAt":31},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[134]]