[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M7ESBYVMXF55RWHC84XCPCY5":3,"skill-same:01M7ESBYVMXF55RWHC84XCPCY5":70},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":26,"commitSha":27,"skillDirectory":28,"forksCount":29,"repositoryHtmlUrl":30,"repositoryHomepageUrl":6,"ownerHtmlUrl":31,"ownerBlogUrl":6,"ownerDescription":32,"updatedAt":33,"install":34,"resources":47},"01M7ESBYVMXF55RWHC84XCPCY5","security-audit",null,"Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying OWASP vulnerabilities (injection, XSS, CSRF), or addressing security concerns about implementations.","lza6\u002FArmor-piercing-system-prompts","lza6","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F128880206?v=4","01M7EB3K7WPX5T28EJ2NVHE6EG","Chinese-tingfeng","01M7EB3K97E1KQ16QWKJMFNGX8",11,"MIT","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: security-audit\nagents: [yokay-security-scanner]\ndescription: Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing authentication and authorization patterns, identifying OWASP vulnerabilities (injection, XSS, CSRF), or addressing security concerns about implementations.\n---\n\n# Security Audit\n\nSystematic security review for application code, dependencies, and configuration.\n\n**Not a replacement for professional penetration testing.** Identifies common vulnerabilities within scope of code review.\n\n## Audit Types\n\n| Type | Focus | When to Use |\n|------|-------|-------------|\n| Code Review | OWASP Top 10, injection, auth | New features, PRs, suspicious code |\n| Dependency | CVEs, outdated packages | Before deploy, periodic, CI\u002FCD |\n| Configuration | Secrets, permissions, hardening | Infrastructure changes, new envs |\n| Architecture | Attack surface, data flow | Design phase, major refactors |\n| API Security | Auth, authz, rate limiting | New endpoints, public APIs |\n\n## When NOT to Use\n\n- **Designing new auth flows** — Use `api-design` for designing OAuth2\u002FJWT endpoints from scratch\n- **Performance issues** — Use `performance-optimization` even if caused by auth overhead\n- **CI\u002FCD pipeline security** — Use `ci-cd` for pipeline hardening (secret management, permissions)\n\n## Key Principles\n\n- **Scope first** — Define audit area, depth, and constraints before scanning\n- **Classify severity** — Critical (24-48h), High (1 week), Medium (2-4 weeks), Low (backlog)\n- **Remediate or track** — Fix critical issues immediately, create ohno tasks for the rest\n- **No secrets in code** — Scan for hardcoded credentials, API keys, connection strings\n\n## Quick Start Checklist\n\n1. Define audit scope and type (code, dependency, config, architecture, API)\n2. Run automated scans (npm audit, grep patterns, secret detection)\n3. Review findings and classify severity using decision tree in references\n4. Remediate critical\u002Fhigh findings immediately\n5. Create ohno tasks for medium\u002Flow findings with appropriate priority\n6. Document findings in audit report\n\n## References\n\n| Reference | Description |\n|-----------|-------------|\n| [owasp-top-10.md](references\u002Fowasp-top-10.md) | OWASP vulnerabilities with detection and fixes |\n| [dependency-security.md](references\u002Fdependency-security.md) | npm audit, pip-audit, Snyk, CI\u002FCD integration |\n| [auth-patterns.md](references\u002Fauth-patterns.md) | Secure authentication and authorization patterns |\n| [api-security.md](references\u002Fapi-security.md) | API-specific security concerns |\n| [secrets-management.md](references\u002Fsecrets-management.md) | Handling sensitive configuration |\n","# Security Audit\n\nSystematic security review for application code, dependencies, and configuration.\n\n**Not a replacement for professional penetration testing.** Identifies common vulnerabilities within scope of code review.\n\n## Audit Types\n\n| Type | Focus | When to Use |\n|------|-------|-------------|\n| Code Review | OWASP Top 10, injection, auth | New features, PRs, suspicious code |\n| Dependency | CVEs, outdated packages | Before deploy, periodic, CI\u002FCD |\n| Configuration | Secrets, permissions, hardening | Infrastructure changes, new envs |\n| Architecture | Attack surface, data flow | Design phase, major refactors |\n| API Security | Auth, authz, rate limiting | New endpoints, public APIs |\n\n## When NOT to Use\n\n- **Designing new auth flows** — Use `api-design` for designing OAuth2\u002FJWT endpoints from scratch\n- **Performance issues** — Use `performance-optimization` even if caused by auth overhead\n- **CI\u002FCD pipeline security** — Use `ci-cd` for pipeline hardening (secret management, permissions)\n\n## Key Principles\n\n- **Scope first** — Define audit area, depth, and constraints before scanning\n- **Classify severity** — Critical (24-48h), High (1 week), Medium (2-4 weeks), Low (backlog)\n- **Remediate or track** — Fix critical issues immediately, create ohno tasks for the rest\n- **No secrets in code** — Scan for hardcoded credentials, API keys, connection strings\n\n## Quick Start Checklist\n\n1. Define audit scope and type (code, dependency, config, architecture, API)\n2. Run automated scans (npm audit, grep patterns, secret detection)\n3. Review findings and classify severity using decision tree in references\n4. Remediate critical\u002Fhigh findings immediately\n5. Create ohno tasks for medium\u002Flow findings with appropriate priority\n6. Document findings in audit report\n\n## References\n\n| Reference | Description |\n|-----------|-------------|\n| [owasp-top-10.md](references\u002Fowasp-top-10.md) | OWASP vulnerabilities with detection and fixes |\n| [dependency-security.md](references\u002Fdependency-security.md) | npm audit, pip-audit, Snyk, CI\u002FCD integration |\n| [auth-patterns.md](references\u002Fauth-patterns.md) | Secure authentication and authorization patterns |\n| [api-security.md](references\u002Fapi-security.md) | API-specific security concerns |\n| [secrets-management.md](references\u002Fsecrets-management.md) | Handling sensitive configuration |\n",{"name":5,"agents":24,"description":7},[25],"yokay-security-scanner","main","d69096e239f2a89aabc2cd078c47664a9d3b1e11","04-安全渗透\u002Fsecurity-audit",3,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts","https:\u002F\u002Fgithub.com\u002Flza6","个人vx：Tf00798\r\n个人✈：@TFGY999","2026-10-08 14:29:22",{"source":8,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add lza6\u002FArmor-piercing-system-prompts --skill security-audit",{"tool":40,"command":41},"bunx","bunx skills add lza6\u002FArmor-piercing-system-prompts --skill security-audit",{"tool":43,"command":44},"pnpm","pnpm dlx skills add lza6\u002FArmor-piercing-system-prompts --skill security-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002FSKILL.md",true,[48,54,58,62,66],{"path":49,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":52,"sourceHtmlUrl":53},"references\u002Fapi-security.md","REFERENCE","参考文档",12924,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002Freferences\u002Fapi-security.md",{"path":55,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":56,"sourceHtmlUrl":57},"references\u002Fauth-patterns.md",14569,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002Freferences\u002Fauth-patterns.md",{"path":59,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":60,"sourceHtmlUrl":61},"references\u002Fdependency-security.md",8121,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002Freferences\u002Fdependency-security.md",{"path":63,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":64,"sourceHtmlUrl":65},"references\u002Fowasp-top-10.md",11695,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002Freferences\u002Fowasp-top-10.md",{"path":67,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":68,"sourceHtmlUrl":69},"references\u002Fsecrets-management.md",11686,"https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F04-安全渗透\u002Fsecurity-audit\u002Freferences\u002Fsecrets-management.md",[71,78,85,92,100,107],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":77,"publishedAt":19},"01M7EXRM12046G0GM1WGMMFXCN","ci-cd-and-automation","Automates CI\u002FCD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test runners in CI, or establish deployment strategies.","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fci-cd-and-automation\u002FSKILL.md",[],[],{"skillNo":79,"name":80,"nameZh":6,"description":81,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":82,"categories":83,"keywords":84,"publishedAt":19},"01M7EXRFYYSJ3Y15AGPDDEWWQD","chrome-devtools","Uses Chrome DevTools via MCP for efficient debugging, troubleshooting and browser automation. Use when debugging web pages, automating browser interactions, analyzing performance, or inspecting network requests. This skill does not apply to `--slim` mode (MCP configuration).","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fchrome-devtools\u002FSKILL.md",[],[],{"skillNo":86,"name":87,"nameZh":6,"description":88,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":91,"publishedAt":19},"01M7EXR6EYPE4X5X1BTAE6QJRV","chrome-cdp","Drive a real Chrome via the Chrome DevTools Protocol (CDP). Ensures a\ndebuggable Chrome is running (launching it if needed) so the agent can\nnavigate, read page content, inspect the DOM, run JavaScript, and take\nscreenshots — without the user typing any launch command. Includes a\nfirst-class \"review a live running app\" flow: point Chrome at the app under\ndevelopment and inspect\u002Fscreenshot the REAL page (what a static-artifact tool\ncannot do). Backed by Glimpse and the chrome-devtools MCP server. Use when\nasked to \"use chrome\", \"open chrome\", \"drive my browser\", \"read the page in\nchrome\", \"review the running app\", \"screenshot the app\", or \"\u002Fchrome-cdp\".","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fchrome-cdp\u002FSKILL.md",[],[],{"skillNo":93,"name":94,"nameZh":6,"description":95,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":96,"licenseFileUrl":6,"sourceHtmlUrl":97,"categories":98,"keywords":99,"publishedAt":19},"01M7EXR1Y7E79KQKG4J798XGH6","check-identity-pack","Run an AFP 100-point or AUSTRAC safe-harbour identity check over a set of documents, and report exactly what's missing. Use when the user asks to check identity documents, verify someone's ID for onboarding, or assess whether a document pack satisfies Australian identity requirements.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fcheck-identity-pack\u002FSKILL.md",[],[],{"skillNo":101,"name":102,"nameZh":6,"description":103,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":104,"categories":105,"keywords":106,"publishedAt":19},"01M7EXQXW7C7PGREJW9ZZTZ16H","changelog","Auto-generates a changelog from git commits, sprint data, and design documents. Produces both internal and player-facing versions.","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fchangelog\u002FSKILL.md",[],[],{"skillNo":108,"name":109,"nameZh":6,"description":110,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":111,"categories":112,"keywords":113,"publishedAt":19},"01M7EXQMH2ZME3ANN8Q8MEWPFB","cellxgene-census","Query the CZ CELLxGENE Census programmatically for versioned public single-cell and spatial transcriptomics data. Use when you need population-scale cell metadata, gene expression slices, Census summary counts, source H5AD URIs\u002Fdownloads, embeddings, spatial Census data, or reference atlas comparisons across organisms, tissues, diseases, assays, and cell types. For analyzing your own local single-cell data use scanpy, anndata, or scvi-tools.","https:\u002F\u002Fgithub.com\u002Flza6\u002FArmor-piercing-system-prompts\u002Fblob\u002Fmain\u002F05-技能与代理开发\u002Fcellxgene-census\u002FSKILL.md",[],[]]