vulnerability-analysis

仓库创建 2026年5月19日最近提交 26 天前SkillHot 收录 22 天前

▸ 精选理由

将自动化分析与审计流程结合，适合代码安全团队快速定位漏洞

▸ 风险提示

可用于发现未披露漏洞，须在合法授权与负责任披露范围内使用

这个 Skill 做什么

利用 CodeQL/Semgrep/Joern 等工具进行源代码从源到汇的漏洞追踪

用 CodeQL、Semgrep、Joern 这类工具把“不可信数据”从源头一路追到汇点，帮你系统性找出注入、内存安全、反序列化、密钥/授权/竞态和供应链等漏洞。适合做代码审计、复核 sanitizer 或质疑信任边界的时候用。特色是可复现、有脚本支持，能把发现定位到具体数据流和可运行的检测里。

▸ 展开 SKILL.md 英文原文

Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks

开发编程源码审计静态分析CodeQL通用

328

Stars

Forks

仓库内 Skill

+17

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/vulnerability-analysis/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/main/skills/vulnerability-analysis/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Vulnerability Analysis

Every vulnerability you miss is one an attacker finds first. Systematic source
auditing traces untrusted data from **source** to **sink**, evaluates every
sanitizer for bypass, and questions each trust-boundary assumption. This skill is
the router; depth lives in `references/`, and every technique cluster is backed
by a runnable tool in `scripts/`.

## When to Activate

- Auditing any codebase (white/grey box) for security vulnerabilities
- Writing/driving CodeQL queries, Semgrep taint rules, or Joern CPGQL flows
- Tracing injection, deserialization, prototype-pollution, or memory-safety paths
- Reviewing auth/authorization (IDOR/BOLA), cryptography, or concurrency

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有