shannon-defensive-security
Use when working with Shannon for white-box defensive application security testing, repo-local setup, workflow inspection, or safe evaluation of its multi-agent pentest pipeline.
- License 许可
- Apache-2.0
- 最近更新
- 2026-04-14
- Stars
- ★ 2
- Forks
- 0
01 前言 Front Matter
- name
- shannon-defensive-security
- license
- Apache-2.0
- description
- Use when working with Shannon for white-box defensive application security testing, repo-local setup, workflow inspection, or safe evaluation of its multi-agent pentest pipeline.
03 SKILL.md 正文
Shannon Defensive Security
Use this skill for:
/Users/wendyly/.local/share/agent-skills/external/shannon
Scope
- Treat Shannon as a defensive white-box security tool.
- Use only against applications you own or have explicit authorization to test.
- Do not point it at untrusted or adversarial repositories without an explicit prompt-injection review.
Default Workflow
- Read
README.mdandCLAUDE.mdbefore making changes. - Inspect
apps/cli/andapps/worker/separately. - Review Docker, Temporal, and model-provider assumptions before any execution.
- Prefer static review and configuration work over live exploitation.
- If execution is necessary, use isolated test targets and non-production credentials.
Local Notes
- Stack: TypeScript, pnpm, Turbo, Docker, Temporal
- Native docs:
CLAUDE.md - This repo already contains agent-oriented guidance, but not a portable
SKILL.md
Safety
- Do not auto-install or auto-run scans against third-party systems.
- Do not bypass the repo's package age or safety checks.
- Treat generated reports, prompts, and workspace artifacts as sensitive security material.
04 同仓库更多 Skills
web-design-guidelines
Web platform design and accessibility guidelines. Use when building web interfaces, auditing accessibility, implementing responsive layouts, or reviewing web UI code. Triggers on tasks involving HTML, CSS, web components, WCAG compliance, responsive design, or web performance.
watchos-design-guidelines
Apple Human Interface Guidelines for Apple Watch. Use when building watchOS apps, complications, or workout features. Triggers on tasks involving Watch UI, Digital Crown, glanceable interfaces, or wrist-based interactions.
visionos-design-guidelines
Apple Human Interface Guidelines for Apple Vision Pro. Use when building spatial computing apps, implementing eye/hand input, or designing immersive experiences. Triggers on tasks involving visionOS, RealityKit, spatial UI, or mixed reality.
tvos-design-guidelines
Apple Human Interface Guidelines for Apple TV. Use when building tvOS apps with focus-based navigation, Siri Remote input, or living room viewing experiences. Triggers on tasks involving Apple TV, tvOS, 10-foot UI, or media playback.
timesfm-forecasting
Zero-shot time series forecasting with Google's TimesFM foundation model. Use this skill when forecasting ANY univariate time series — sales, sensor readings, stock prices, energy demand, patient vitals, weather, or scientific measurements — without training a custom model. Supports both basic forecasting and advanced covariate forecasting (XReg) with dynamic and static exogenous variables. Automatically checks system RAM/GPU before loading the model, validates dataset fit before processing, supports CSV/DataFrame/array inputs, and returns point forecasts with calibrated prediction intervals. Includes a preflight system checker script that MUST be run before first use to verify the machine can load the model and handle your specific dataset.
sqlmap-defensive-audit
Use when working with sqlmap for defensive SQL injection research, local lab validation, code reading, or safe remediation guidance around SQLi testing workflows.