[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6NTFSTJD3ZXW1J7PSZ9VPZ3":3,"skill-same:01M6NTFSTJD3ZXW1J7PSZ9VPZ3":76},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":41,"linkOnly":42,"markdownContent":43,"markdownBody":44,"frontMatter":45,"refName":54,"commitSha":55,"skillDirectory":56,"forksCount":14,"repositoryHtmlUrl":57,"repositoryHomepageUrl":6,"ownerHtmlUrl":58,"ownerBlogUrl":59,"ownerDescription":60,"updatedAt":61,"install":62,"resources":75},"01M6NTFSTJD3ZXW1J7PSZ9VPZ3","config-security-scan",null,"Scan .claude\u002F directory for security misconfigurations, exposed secrets, unsafe permissions","rubicanjr\u002FFinCognis","rubicanjr","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F234912519?v=4","01M6NT156NND8J474G34SB3923","Rubi","01M6NT15B70RWXE1N3YV0BZY8A",0,"MIT","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fconfig-security-scan\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"config security scan","security","config","security scan","scan","Bash","unsafe","for","hooks","settings","read","grep","MCP","secrets","audit","permissions","directory","2026-11-10 10:12:30",false,"---\nname: config-security-scan\ndescription: Scan .claude\u002F directory for security misconfigurations, exposed secrets, unsafe permissions\nallowed-tools: [Bash, Read, Grep, Glob]\nkeywords: [security, config, scan, audit, claude, settings, mcp, hooks, agents, secrets, permissions]\n---\n\n# Config Security Scan\n\nScan your `.claude\u002F` directory and related configuration files for security issues. Inspired by AgentShield pattern - checks CLAUDE.md, settings.json, MCP configs, hooks, and agent definitions for misconfigurations, exposed secrets, and unsafe permissions.\n\n## Usage\n\n```\n\u002Fconfig-security-scan [path]\n```\n\nDefault path: `.claude\u002F` in current project.\n\n## What It Checks\n\n### 1. Secrets Detection (CRITICAL)\n```\n- API keys, tokens, passwords in CLAUDE.md\n- Hardcoded credentials in hook scripts\n- Secrets in MCP server configs\n- Bearer tokens in agent definitions\n- .env files committed to git\n```\n\n### 2. Permission Escalation (HIGH)\n```\n- dangerouslySkipPermissions in settings.json\n- Overly broad tool permissions (all tools for simple agents)\n- MCP servers with filesystem write access\n- Hooks with shell execution and no validation\n- Agents with Bash tool that don't need it\n```\n\n### 3. MCP Server Security (HIGH)\n```\n- Unknown\u002Funtrusted MCP servers\n- MCP servers with network access + filesystem access\n- Missing authentication on MCP endpoints\n- MCP servers running as root\u002Fadmin\n- Unverified npm packages in MCP configs\n```\n\n### 4. Hook Security (MEDIUM)\n```\n- Hooks that execute user input\n- Hooks without error handling\n- Hooks that modify git config\n- Hooks that access external networks\n- Hooks with hardcoded paths\n```\n\n### 5. Agent Definition Security (MEDIUM)\n```\n- Agents with unnecessary tools\n- Agents with system-level Bash access\n- Agent descriptions that could enable prompt injection\n- Agents without clear scope boundaries\n```\n\n### 6. Configuration Hygiene (LOW)\n```\n- Unused MCP server configs\n- Deprecated settings\n- Conflicting rules\n- Missing recommended security settings\n```\n\n## Scan Procedure\n\n```bash\n# Step 1: Find all config files\nfind .claude\u002F -type f \\( -name \"*.json\" -o -name \"*.md\" -o -name \"*.yml\" -o -name \"*.yaml\" -o -name \"*.js\" -o -name \"*.mjs\" -o -name \"*.ts\" \\)\n\n# Step 2: Secret patterns\ngrep -rn \"api[_-]?key\\|password\\|secret\\|token\\|bearer\\|sk-\\|pk_\\|ghp_\\|gho_\\|xoxb-\\|xoxp-\" .claude\u002F\n\n# Step 3: Permission checks\ngrep -rn \"dangerouslySkipPermissions\\|allowedTools.*Bash\\|shell_exec\\|eval(\" .claude\u002F\n\n# Step 4: MCP config review\ncat .mcp.json 2>\u002Fdev\u002Fnull | jq '.mcpServers | keys'\n\n# Step 5: Hook review\nls .claude\u002Fhooks\u002F 2>\u002Fdev\u002Fnull\n```\n\n## Output Format\n\n```markdown\n# Config Security Scan Report\nScanned: [path]\nDate: [timestamp]\n\n## Summary\n- CRITICAL: X issues\n- HIGH: Y issues\n- MEDIUM: Z issues\n- LOW: W issues\n\n## CRITICAL Issues\n\n### [Issue Title]\n**File:** [path]\n**Line:** [number]\n**Issue:** [description]\n**Fix:** [remediation]\n\n## Recommendations\n1. [Action item]\n```\n\n## Hard Exclusion List (Skip These)\n\nThese are NOT security issues in the .claude\u002F context:\n- Environment variable references (not actual values)\n- Test\u002Fexample credentials clearly marked as such\n- Public API keys meant to be public\n- SHA hashes used as identifiers\n- Base64-encoded non-secret data\n- localhost\u002F127.0.0.1 URLs\n\n## Integration\n\n- **security-reviewer**: Calls this skill during security audits\n- **verifier**: Includes config scan in pre-commit checks\n- **shipper**: Runs before deployments\n","# Config Security Scan\n\nScan your `.claude\u002F` directory and related configuration files for security issues. Inspired by AgentShield pattern - checks CLAUDE.md, settings.json, MCP configs, hooks, and agent definitions for misconfigurations, exposed secrets, and unsafe permissions.\n\n## Usage\n\n```\n\u002Fconfig-security-scan [path]\n```\n\nDefault path: `.claude\u002F` in current project.\n\n## What It Checks\n\n### 1. Secrets Detection (CRITICAL)\n```\n- API keys, tokens, passwords in CLAUDE.md\n- Hardcoded credentials in hook scripts\n- Secrets in MCP server configs\n- Bearer tokens in agent definitions\n- .env files committed to git\n```\n\n### 2. Permission Escalation (HIGH)\n```\n- dangerouslySkipPermissions in settings.json\n- Overly broad tool permissions (all tools for simple agents)\n- MCP servers with filesystem write access\n- Hooks with shell execution and no validation\n- Agents with Bash tool that don't need it\n```\n\n### 3. MCP Server Security (HIGH)\n```\n- Unknown\u002Funtrusted MCP servers\n- MCP servers with network access + filesystem access\n- Missing authentication on MCP endpoints\n- MCP servers running as root\u002Fadmin\n- Unverified npm packages in MCP configs\n```\n\n### 4. Hook Security (MEDIUM)\n```\n- Hooks that execute user input\n- Hooks without error handling\n- Hooks that modify git config\n- Hooks that access external networks\n- Hooks with hardcoded paths\n```\n\n### 5. Agent Definition Security (MEDIUM)\n```\n- Agents with unnecessary tools\n- Agents with system-level Bash access\n- Agent descriptions that could enable prompt injection\n- Agents without clear scope boundaries\n```\n\n### 6. Configuration Hygiene (LOW)\n```\n- Unused MCP server configs\n- Deprecated settings\n- Conflicting rules\n- Missing recommended security settings\n```\n\n## Scan Procedure\n\n```bash\n# Step 1: Find all config files\nfind .claude\u002F -type f \\( -name \"*.json\" -o -name \"*.md\" -o -name \"*.yml\" -o -name \"*.yaml\" -o -name \"*.js\" -o -name \"*.mjs\" -o -name \"*.ts\" \\)\n\n# Step 2: Secret patterns\ngrep -rn \"api[_-]?key\\|password\\|secret\\|token\\|bearer\\|sk-\\|pk_\\|ghp_\\|gho_\\|xoxb-\\|xoxp-\" .claude\u002F\n\n# Step 3: Permission checks\ngrep -rn \"dangerouslySkipPermissions\\|allowedTools.*Bash\\|shell_exec\\|eval(\" .claude\u002F\n\n# Step 4: MCP config review\ncat .mcp.json 2>\u002Fdev\u002Fnull | jq '.mcpServers | keys'\n\n# Step 5: Hook review\nls .claude\u002Fhooks\u002F 2>\u002Fdev\u002Fnull\n```\n\n## Output Format\n\n```markdown\n# Config Security Scan Report\nScanned: [path]\nDate: [timestamp]\n\n## Summary\n- CRITICAL: X issues\n- HIGH: Y issues\n- MEDIUM: Z issues\n- LOW: W issues\n\n## CRITICAL Issues\n\n### [Issue Title]\n**File:** [path]\n**Line:** [number]\n**Issue:** [description]\n**Fix:** [remediation]\n\n## Recommendations\n1. [Action item]\n```\n\n## Hard Exclusion List (Skip These)\n\nThese are NOT security issues in the .claude\u002F context:\n- Environment variable references (not actual values)\n- Test\u002Fexample credentials clearly marked as such\n- Public API keys meant to be public\n- SHA hashes used as identifiers\n- Base64-encoded non-secret data\n- localhost\u002F127.0.0.1 URLs\n\n## Integration\n\n- **security-reviewer**: Calls this skill during security audits\n- **verifier**: Includes config scan in pre-commit checks\n- **shipper**: Runs before deployments\n",{"name":5,"keywords":46,"description":7,"allowed-tools":50},[25,26,28,38,47,33,48,32,49,37,39],"claude","mcp","agents",[29,51,52,53],"Read","Grep","Glob","main","70e1c350500ee750987420bbae48837afa906b7e","skills\u002Fconfig-security-scan","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis","https:\u002F\u002Fgithub.com\u002Frubicanjr","linktr.ee\u002Ffinanskodu","Industrial Engineer & CIO @FinansKodu. Architecting AI-driven financial agents and autonomous workflows. 🏗️ Building systems, not just prompts.","2026-06-09 13:50:15",{"source":8,"skillName":5,"commands":63,"prompt":73,"zipAvailable":74},[64,67,70],{"tool":65,"command":66},"npx","npx skills add rubicanjr\u002FFinCognis --skill config-security-scan",{"tool":68,"command":69},"bunx","bunx skills add rubicanjr\u002FFinCognis --skill config-security-scan",{"tool":71,"command":72},"pnpm","pnpm dlx skills add rubicanjr\u002FFinCognis --skill config-security-scan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fconfig-security-scan\u002FSKILL.md",true,[],[77,94,103,123,152,170],{"skillNo":78,"name":79,"nameZh":6,"description":80,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":81,"categories":82,"keywords":84,"publishedAt":41},"01M6NWS9DAXJTADT4T5MB49X8W","workflow-router","Goal-based workflow orchestration - routes tasks to specialist agents based on user goals","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fworkflow-router\u002FSKILL.md",[83],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[85,86,87,88,89,90,91,92,93],"workflow router","workflow","router","orchestration","goals","goal","user","workflow orchestration","tasks",{"skillNo":95,"name":96,"nameZh":6,"description":97,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":41},"01M6NWS3RETSC0SHP16HP66E14","wiring","Wiring Verification","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fwiring\u002FSKILL.md",[],[96,101,102],"verification","false",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":107,"categories":108,"keywords":112,"publishedAt":41},"01M6NWS0XW9CVQZBDA1EGW0TWC","websocket-patterns","Connection management, room patterns, reconnection strategies, message buffering, and binary protocol design.","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fwebsocket-patterns\u002Fskill.md",[109],{"categoryNo":110,"categoryName":111,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",[113,114,115,116,117,118,119,120,121,122],"websocket","patterns","websocket patterns","design","protocol","management","message","strategies","binary","connection",{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":127,"categories":128,"keywords":133,"publishedAt":41},"01M6NWRDQDX9ZNETAWRRMQWV52","visual-verdict","Screenshot comparison QA for frontend development. Takes a screenshot of the current implementation, scores it across multiple visual dimensions, and returns a structured PASS\u002FREVISE\u002FFAIL verdict with concrete fixes. Use when implementing UI from a design reference or verifying visual correctness.","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fvisual-verdict\u002FSKILL.md",[129,132],{"categoryNo":130,"categoryName":131,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000009","前端开发",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[134,135,136,137,138,139,140,141,142,31,143,144,145,116,146,147,148,149,150,151],"visual","verdict","visual verdict","ui","across","revise","comparison","correctness","implementing","fixes","dimensions","frontend","development","qa","screenshot","returns","use","frontend development",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":158,"publishedAt":41},"01M6NWR8HSNRS7MNDK2J02QYMN","verification-loop","Comprehensive verification system covering build, types, lint, tests, security, and diff review before a PR.","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fverification-loop\u002FSKILL.md",[],[159,160,101,161,162,25,163,164,165,166,167,168,169],"verification loop","loop","lint","review","pr","system","diff","build","tests","diff review","types",{"skillNo":171,"name":172,"nameZh":6,"description":173,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":174,"categories":175,"keywords":176,"publishedAt":41},"01M6NWR4HHSFR0VR5EXFRWA747","vector-db-patterns","Embedding strategies, ANN algorithms, hybrid search, RAG chunking strategies, and reranking for semantic search and retrieval.","https:\u002F\u002Fgithub.com\u002Frubicanjr\u002FFinCognis\u002Fblob\u002Fmain\u002Fskills\u002Fvector-db-patterns\u002Fskill.md",[],[177,178,179,180,114,181,182,183,184,120,185,186,187,188,189,31,190,191],"vector db patterns","vector db","db","vector","semantic search","search","embedding strategies","algorithms","chunking","semantic","retrieval","embedding","Hybrid Search","hybrid","rag"]