security-research

仓库创建 2025年12月3日最近提交 3 小时前SkillHot 收录 20 天前

▸ 精选理由

能区分真实可利用漏洞，适合发布前安全评估

▸ 风险提示

可能生成可利用 PoC，具潜在滥用风险且需合规授权

这个 Skill 做什么

并行化的漏洞审计与可利用性证明，产出 PoC 与严重度评估

并行出动三名漏洞猎手和两名 PoC 工程师，对代码库做并行化审计，最后给出可利用性证明（PoC）和按实际可利用性校准的严重度评级。适合做发布前安全检查、漏洞调研或验证威胁模型，能把“可能存在的问题”区分成“真能被利用”的漏洞。特别之处是团队化且以实测 exploitability 为准，避免误判泛泛风险。

▸ 展开 SKILL.md 英文原文

Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.

研究检索安全审计并行渗透PoC通用

6.7w

Stars

5.4k

Forks

仓库内 Skill

+1.6k

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/dev/.agents/skills/security-research/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/dev/.agents/skills/security-research/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Security Research - Team Mode Vulnerability Audit

Use this skill to run a parallel security audit that separates real exploitability from generic concern. The team has 3 vulnerability hunters and 2 PoC engineers.

## Hard Preconditions

Before starting, verify:

1. `team_*` tools are available. If not, stop and tell the user:
   `security-research requires team-mode. Set team_mode.enabled: true in your oh-my-openagent config, restart opencode, then retry.`
2. You are in the main session, not a background subagent.
3. You have a concrete target: repository, diff range, PR, release candidate, path list, or threat surface.

If the user provided no target, audit the current repository and cur

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有