[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71KAZX96WA3FDZD2HP12C9T":3,"skill-same:01M71KAZX96WA3FDZD2HP12C9T":94},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":34,"publishedAt":55,"linkOnly":56,"markdownContent":57,"markdownBody":58,"frontMatter":59,"refName":61,"commitSha":62,"skillDirectory":63,"forksCount":64,"repositoryHtmlUrl":65,"repositoryHomepageUrl":66,"ownerHtmlUrl":67,"ownerBlogUrl":68,"ownerDescription":69,"updatedAt":70,"install":71,"resources":83},"01M71KAZX96WA3FDZD2HP12C9T","api-security",null,"Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI\u002FCD testing.","coco-research\u002Fcoco","coco-research","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F68911604?v=4","01M71JRE9C4NM4NSZM4JD0BJTB","Coco Research","01M71JREA0ZMR0PMH3CKA99SN1",631,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fapi-security\u002FSKILL.md",[18,23,26,29],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":30,"categoryName":31,"taxonomyType":32,"taxonomyTypeDesc":33},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"security","api","api security","rate-limit","testing","rate","for","true","limit","CI\u002FCD","security assessment","use","soap","discovery","websocket","GraphQL","REST","ci","authentication","assessment","2026-11-10 10:12:30",false,"---\nname: api-security\ndescription: Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI\u002FCD testing.\nuser-invocable: true\n---\n# API 安全测试\n\n## 适用场景\n\n- REST API 安全测试（OpenAPI\u002FSwagger 驱动或盲测）\n- GraphQL 安全审计（内省、批查询、别名过载）\n- WebSocket 安全测试\n- JWT \u002F OAuth 2.0 认证测试\n- BOLA\u002FIDOR\u002FBFLA 授权漏洞检测\n- API 限速绕过与 DoS 测试\n\n## 10 阶段测试流程\n\n### Phase 1: API 发现与侦察\n\n```text\n主动发现：\n□ Vespasian: 无头浏览器爬取 → 自动生成 OpenAPI 3.0 \u002F GraphQL SDL 规范\n□ Entropy --discover: 从 robots.txt + JS 文件提取端点\n□ Kiterunner \u002F ffuf: 爆破未文档化的端点路径\n□ 检查常见路径: \u002Fswagger.json, \u002Fopenapi.json, \u002Fgraphql, \u002Fapi-docs\n\nGraphQL 内省（三级尝试）：\n  1. 标准内省查询\n  2. 精简查询（绕过 WAF 全量封禁）\n  3. 仅查 __schema { types { name } }（最小探测）\n```\n\n### Phase 2: 认证测试\n\n```text\nJWT 分析（jwt_tool \u002F Burp）：\n□ alg:none 攻击: 修改头部为 \"alg\":\"none\"，清空签名\n□ 密钥混淆: RS256 公钥 → HS256 对称密钥\n□ 弱 HMAC 密钥爆破: jwt_tool -C -d wordlist.txt\n□ 过期\u002F声明篡改: 修改 exp\u002Fiat\u002Fsub\u002Frole 声明\n□ kid 注入: ..\u002F..\u002Fetc\u002Fpasswd → HMAC 签名绕过\n\nOAuth 2.0：\n□ redirect_uri 操控 → 授权码泄漏\n□ CSRF via state 参数缺失\n□ Token 在 Referer 头泄漏\n□ PKCE 缺失检测\n\nGraphQL 认证：\n□ mutation 通过 GET 请求绕过认证（CSRF）\n□ 批查询认证绕过\n```\n\n### Phase 3: 授权测试（BOLA\u002FIDOR\u002FBFLA）\n\n```text\nBOLA（对象级授权绕过）：\n□ 遍历数字 ID: \u002Fuser\u002F1 → \u002Fuser\u002F2 → \u002Fuser\u002F3\n□ 遍历 UUID\n□ 遍历用户名\u002F邮箱\n□ Burp Autorize: 双会话重放对比\n\nBFLA（功能级授权绕过）：\n□ 普通用户执行管理员 API\n□ HTTP 方法切换: GET → PUT → PATCH → DELETE\n□ API 版本降级: \u002Fv2\u002Fadmin → \u002Fv1\u002Fadmin\n□ 批量操作注入: {\"users\": [1,2,3]} → {\"users\": [1,2,3,admin_id]}\n\n工具: Burp Autorize, AuthMatrix, Entropy (malicious_insider persona)\n```\n\n### Phase 4: GraphQL 专项\n\n```text\n内省泄漏 → 信息暴露检测\n别名过载 → 100+ 别名 DoS\n批查询 → 10+ 同时查询 DoS\n字段重复 → __typename × 500\n指令过载 → 递归 @skip\u002F@include\n循环查询 → 深度嵌套内省递归\n字段建议 → 错误消息信息泄漏\nGraphiQL\u002FPlayground 暴露 → IDE 公开风险\nGET 突变 → CSRF 风险\n追踪\u002F调试模式 → 元数据泄漏\n\n工具: FireTail, Escape DAST, api.sh (Phases 1-3)\n```\n\n### Phase 5: REST 输入验证\n\n```text\n□ HTTP 方法切换: GET→POST→PUT→DELETE→OPTIONS→PATCH\n□ Content-Type 篡改: JSON→XML→multipart\n□ NoSQL 注入: {\"username\": {\"$gt\": \"\"}}\n□ SSRF via URL 参数: webhook URL\u002F头像 URL\u002F导入 URL\n□ XXE in XML 端点\n□ 参数污染: \u002Fapi?role=user&role=admin\n□ 批量赋值: 向请求体添加 is_admin: true\n```\n\n### Phase 6: 业务逻辑与差分测试\n\n```text\n□ Entropy compare: diff v1 vs v2 API → 状态码变化\u002F字段删除\u002F延迟回归\n□ 多角色工作流测试: admin\u002Fuser\u002Freadonly 权限矩阵\n□ 优惠券\u002F积分\u002F价格操控\n□ 竞态条件: 并发请求测试 TOCTOU\n```\n\n### Phase 7: WebSocket 测试\n\n```text\n□ 端点发现\n□ 消息注入（注入 payload、原型污染）\n□ 超大消息处理\n□ 类型混淆\n□ 跨站点 WebSocket 劫持（CSWH）\n```\n\n### Phase 8: 限速与 DoS\n\n```text\n□ 限速绕过 via 头部: X-Forwarded-For, X-Real-IP\n□ 路径变体: \u002Fapi\u002F → \u002Fapi → \u002FApi\u002F → \u002FAPI\u002F\n□ Slowloris 低带宽耗尽\n□ GraphQL 批查询深度嵌套 DoS\n□ IP 轮换测试（ProxyCat 代理池）\n```\n\n### Phase 9: 数据暴露\n\n```text\n□ 响应过度暴露: 对比 API 返回 vs UI 展示\n□ 分页枚举: ?page=1&limit=10000\n□ 错误消息信息泄漏: 堆栈跟踪\u002F内部路径\u002FSQL 错误\n□ GraphQL 嵌套遍历访问越权数据\n□ OpenAPI 规范暴露敏感端点\n```\n\n### Phase 10: CI\u002FCD 集成\n\n```text\n□ Entropy --ci --watch: spec 变更时自动重跑\n□ Escape DAST: 按严重度阈值自动阻断构建\n□ 发现持久化为回归测试\n□ StackHawk（开发者优先、ZAP 内核）\n```\n\n## 工具链\n\n| 工具 | 用途 | 获取 |\n|------|------|------|\n| Vespasian | 流量 → OpenAPI\u002FGraphQL 规范 | GitHub: praetorian-inc\u002Fvespasian |\n| Entropy | LLM 生成攻击场景，5 personas | GitHub: arjinexe\u002Fentropy-chaos |\n| Escape DAST | 业务逻辑安全测试 | escape.tech |\n| api.sh | 8 阶段全协议攻击管道 | GitHub: Sharon-Needles\u002Fapi |\n| FireTail | GraphQL 12 专项测试 | firetail.ai |\n| jwt_tool | JWT 全面测试 | GitHub: ticarpi\u002Fjwt_tool |\n| Burp Autorize | 双会话授权对比 | Burp BApp Store |\n\n## 参考\n\n- `references\u002Frest-graphql-testing.md` — REST + GraphQL 深度测试\n- `references\u002Fjwt-oauth-testing.md` — JWT + OAuth 安全测试\n\n","# API 安全测试\n\n## 适用场景\n\n- REST API 安全测试（OpenAPI\u002FSwagger 驱动或盲测）\n- GraphQL 安全审计（内省、批查询、别名过载）\n- WebSocket 安全测试\n- JWT \u002F OAuth 2.0 认证测试\n- BOLA\u002FIDOR\u002FBFLA 授权漏洞检测\n- API 限速绕过与 DoS 测试\n\n## 10 阶段测试流程\n\n### Phase 1: API 发现与侦察\n\n```text\n主动发现：\n□ Vespasian: 无头浏览器爬取 → 自动生成 OpenAPI 3.0 \u002F GraphQL SDL 规范\n□ Entropy --discover: 从 robots.txt + JS 文件提取端点\n□ Kiterunner \u002F ffuf: 爆破未文档化的端点路径\n□ 检查常见路径: \u002Fswagger.json, \u002Fopenapi.json, \u002Fgraphql, \u002Fapi-docs\n\nGraphQL 内省（三级尝试）：\n  1. 标准内省查询\n  2. 精简查询（绕过 WAF 全量封禁）\n  3. 仅查 __schema { types { name } }（最小探测）\n```\n\n### Phase 2: 认证测试\n\n```text\nJWT 分析（jwt_tool \u002F Burp）：\n□ alg:none 攻击: 修改头部为 \"alg\":\"none\"，清空签名\n□ 密钥混淆: RS256 公钥 → HS256 对称密钥\n□ 弱 HMAC 密钥爆破: jwt_tool -C -d wordlist.txt\n□ 过期\u002F声明篡改: 修改 exp\u002Fiat\u002Fsub\u002Frole 声明\n□ kid 注入: ..\u002F..\u002Fetc\u002Fpasswd → HMAC 签名绕过\n\nOAuth 2.0：\n□ redirect_uri 操控 → 授权码泄漏\n□ CSRF via state 参数缺失\n□ Token 在 Referer 头泄漏\n□ PKCE 缺失检测\n\nGraphQL 认证：\n□ mutation 通过 GET 请求绕过认证（CSRF）\n□ 批查询认证绕过\n```\n\n### Phase 3: 授权测试（BOLA\u002FIDOR\u002FBFLA）\n\n```text\nBOLA（对象级授权绕过）：\n□ 遍历数字 ID: \u002Fuser\u002F1 → \u002Fuser\u002F2 → \u002Fuser\u002F3\n□ 遍历 UUID\n□ 遍历用户名\u002F邮箱\n□ Burp Autorize: 双会话重放对比\n\nBFLA（功能级授权绕过）：\n□ 普通用户执行管理员 API\n□ HTTP 方法切换: GET → PUT → PATCH → DELETE\n□ API 版本降级: \u002Fv2\u002Fadmin → \u002Fv1\u002Fadmin\n□ 批量操作注入: {\"users\": [1,2,3]} → {\"users\": [1,2,3,admin_id]}\n\n工具: Burp Autorize, AuthMatrix, Entropy (malicious_insider persona)\n```\n\n### Phase 4: GraphQL 专项\n\n```text\n内省泄漏 → 信息暴露检测\n别名过载 → 100+ 别名 DoS\n批查询 → 10+ 同时查询 DoS\n字段重复 → __typename × 500\n指令过载 → 递归 @skip\u002F@include\n循环查询 → 深度嵌套内省递归\n字段建议 → 错误消息信息泄漏\nGraphiQL\u002FPlayground 暴露 → IDE 公开风险\nGET 突变 → CSRF 风险\n追踪\u002F调试模式 → 元数据泄漏\n\n工具: FireTail, Escape DAST, api.sh (Phases 1-3)\n```\n\n### Phase 5: REST 输入验证\n\n```text\n□ HTTP 方法切换: GET→POST→PUT→DELETE→OPTIONS→PATCH\n□ Content-Type 篡改: JSON→XML→multipart\n□ NoSQL 注入: {\"username\": {\"$gt\": \"\"}}\n□ SSRF via URL 参数: webhook URL\u002F头像 URL\u002F导入 URL\n□ XXE in XML 端点\n□ 参数污染: \u002Fapi?role=user&role=admin\n□ 批量赋值: 向请求体添加 is_admin: true\n```\n\n### Phase 6: 业务逻辑与差分测试\n\n```text\n□ Entropy compare: diff v1 vs v2 API → 状态码变化\u002F字段删除\u002F延迟回归\n□ 多角色工作流测试: admin\u002Fuser\u002Freadonly 权限矩阵\n□ 优惠券\u002F积分\u002F价格操控\n□ 竞态条件: 并发请求测试 TOCTOU\n```\n\n### Phase 7: WebSocket 测试\n\n```text\n□ 端点发现\n□ 消息注入（注入 payload、原型污染）\n□ 超大消息处理\n□ 类型混淆\n□ 跨站点 WebSocket 劫持（CSWH）\n```\n\n### Phase 8: 限速与 DoS\n\n```text\n□ 限速绕过 via 头部: X-Forwarded-For, X-Real-IP\n□ 路径变体: \u002Fapi\u002F → \u002Fapi → \u002FApi\u002F → \u002FAPI\u002F\n□ Slowloris 低带宽耗尽\n□ GraphQL 批查询深度嵌套 DoS\n□ IP 轮换测试（ProxyCat 代理池）\n```\n\n### Phase 9: 数据暴露\n\n```text\n□ 响应过度暴露: 对比 API 返回 vs UI 展示\n□ 分页枚举: ?page=1&limit=10000\n□ 错误消息信息泄漏: 堆栈跟踪\u002F内部路径\u002FSQL 错误\n□ GraphQL 嵌套遍历访问越权数据\n□ OpenAPI 规范暴露敏感端点\n```\n\n### Phase 10: CI\u002FCD 集成\n\n```text\n□ Entropy --ci --watch: spec 变更时自动重跑\n□ Escape DAST: 按严重度阈值自动阻断构建\n□ 发现持久化为回归测试\n□ StackHawk（开发者优先、ZAP 内核）\n```\n\n## 工具链\n\n| 工具 | 用途 | 获取 |\n|------|------|------|\n| Vespasian | 流量 → OpenAPI\u002FGraphQL 规范 | GitHub: praetorian-inc\u002Fvespasian |\n| Entropy | LLM 生成攻击场景，5 personas | GitHub: arjinexe\u002Fentropy-chaos |\n| Escape DAST | 业务逻辑安全测试 | escape.tech |\n| api.sh | 8 阶段全协议攻击管道 | GitHub: Sharon-Needles\u002Fapi |\n| FireTail | GraphQL 12 专项测试 | firetail.ai |\n| jwt_tool | JWT 全面测试 | GitHub: ticarpi\u002Fjwt_tool |\n| Burp Autorize | 双会话授权对比 | Burp BApp Store |\n\n## 参考\n\n- `references\u002Frest-graphql-testing.md` — REST + GraphQL 深度测试\n- `references\u002Fjwt-oauth-testing.md` — JWT + OAuth 安全测试\n\n",{"name":5,"description":7,"user-invocable":60},true,"main","cd89f013b617f7eea982a9bbc60e992974fda2aa","systems\u002Freverse-skill\u002Fskills\u002Fapi-security",15,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco","https:\u002F\u002Fcocoresearch.org\u002Fcoco\u002F","https:\u002F\u002Fgithub.com\u002Fcoco-research","https:\u002F\u002Fcocoresearch.org","Local-first, open-source tools for people who work with AI agents: governed memory, agents that check their own work, and data that stays on your machine.","2026-11-11 12:18:13",{"source":8,"skillName":5,"commands":72,"prompt":82,"zipAvailable":60},[73,76,79],{"tool":74,"command":75},"npx","npx skills add coco-research\u002Fcoco --skill api-security",{"tool":77,"command":78},"bunx","bunx skills add coco-research\u002Fcoco --skill api-security",{"tool":80,"command":81},"pnpm","pnpm dlx skills add coco-research\u002Fcoco --skill api-security","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fapi-security\u002FSKILL.md",[84,90],{"path":85,"resourceType":86,"resourceTypeDesc":87,"sizeBytes":88,"sourceHtmlUrl":89},"references\u002Fjwt-oauth-testing.md","REFERENCE","参考文档",2943,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fapi-security\u002Freferences\u002Fjwt-oauth-testing.md",{"path":91,"resourceType":86,"resourceTypeDesc":87,"sizeBytes":92,"sourceHtmlUrl":93},"references\u002Frest-graphql-testing.md",3296,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fapi-security\u002Freferences\u002Frest-graphql-testing.md",[95,120,130,146,181,200],{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":102,"publishedAt":55},"01M71KEJXF9KMT0BWCMRSRFA4M","trading-super-intelligence","Trading Super Intelligence Team. Named real-world personas across 8 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Ftrading\u002FSKILL.md",[101],{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],"super","trading super intelligence","intelligence","trading","validator","personas","local","composites","studio","team","across","world","first","gated","2026","lm studio","local-first",{"skillNo":121,"name":122,"nameZh":6,"description":123,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":124,"categories":125,"keywords":127,"publishedAt":55},"01M71KEFWS3CMAP7DF1P0FWTDE","strategy-super-intelligence","Strategy Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fstrategy\u002FSKILL.md",[126],{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},[128,103,129,105,107,108,109,110,111,112,113,114,115,116,117,118,119],"strategy","strategy super intelligence",{"skillNo":131,"name":132,"nameZh":6,"description":133,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":134,"categories":135,"keywords":140,"publishedAt":55},"01M71KED56ZEPK2QE84QSQPMT0","risk-compliance-super-intelligence","Risk & Compliance (GRC) Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Frisk-compliance\u002FSKILL.md",[136,137],{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":138,"categoryName":139,"taxonomyType":32,"taxonomyTypeDesc":33},"01JBSEEDCAT000000000000037","律师与法务",[141,103,142,143,144,105,107,108,109,110,145,111,112,113,114,115,116,117,118,119],"risk","risk compliance super intelligence","compliance","risk compliance","grc",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":165,"publishedAt":55},"01M71KE9A2FWSC74VA96W1EZSN","product-design-super-intelligence","Your product + design brain trust and decision partner. Named personas across 8 cells spanning product strategy, discovery\u002Fresearch, growth\u002Fmetrics, design foundations\u002Fusability, design leadership\u002Fcraft, UX\u002Fcontent, design systems, and a…","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fproduct-design\u002FSKILL.md",[152,155,158,159,162],{"categoryNo":153,"categoryName":154,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":156,"categoryName":157,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":160,"categoryName":161,"taxonomyType":32,"taxonomyTypeDesc":33},"01JBSEEDCAT000000000000031","产品经理",{"categoryNo":163,"categoryName":164,"taxonomyType":32,"taxonomyTypeDesc":33},"01JBSEEDCAT000000000000032","设计师",[166,167,105,168,103,169,170,171,172,173,174,112,113,175,176,117,177,178,179,180],"design","product","product design","product design super intelligence","foundations","product-design","decision","design systems","usability","leadership","ux","brain","craft","metrics","trust",{"skillNo":182,"name":183,"nameZh":6,"description":184,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":185,"categories":186,"keywords":189,"publishedAt":55},"01M71KE6H9FPSD9TECYFBPXZ8Y","legal-ip-super-intelligence","Your legal, IP, and regulatory brain trust. 31 named personas across 7 cells covering patent strategy, tech licensing, regulatory litigation, AI governance, open-source compliance, privacy law, and antitrust.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Flegal-ip\u002FSKILL.md",[187,188],{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":138,"categoryName":139,"taxonomyType":32,"taxonomyTypeDesc":33},[190,103,191,105,192,193,180,194,108,195,196,197,128,112,113,198,143,199,117,177],"ip","legal ip super intelligence","legal","sep","tech","litigation","ai governance","open","open-source","governance",{"skillNo":201,"name":202,"nameZh":6,"description":203,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":204,"categories":205,"keywords":207,"publishedAt":55},"01M71KE36QRY610V6YVB9JWRND","healthcare-life-sciences-super-intelligence","Your healthcare and life sciences brain trust. 25 named personas across 7 cells covering drug discovery, medtech, biotech strategy, health policy, genomics, clinical trials, and healthcare economics.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fhealthcare-life-sciences\u002FSKILL.md",[206],{"categoryNo":27,"categoryName":28,"taxonomyType":21,"taxonomyTypeDesc":22},[208,103,209,210,105,193,180,211,48,108,212,213,128,112,113,214,215,216,217,117],"healthcare","healthcare life sciences super intelligence","life","economics","policy","clinical","clinical trials","health","trials","genomics"]