security-audit

仓库创建 2026年7月6日最近提交 23 天前SkillHot 收录 22 天前

▸ 精选理由

用于上线前的深度漏洞排查与闭环修复，专业性强。

▸ 风险提示

会读取敏感代码与配置，需授权并可能接触密钥。

这个 Skill 做什么

对 Web 应用进行全面安全审计，并提供可执行的修复与证据报告。

对 Web 应用做全面的安全审计并给出可执行的修复和证据报告，覆盖 authn/authz、IDOR、注入、XSS、CSRF、SSRF、CORS、webhooks、cookies 等典型漏洞。适合上线前安全把关或要彻底修补项目已知漏洞时使用。特点是不只是列出问题，还给出修复代码建议、复测步骤和证据链，方便闭环处理。

▸ 展开 SKILL.md 英文原文

Hard security audit and fix for web apps - authn authz IDOR injection XSS CSRF SSRF secrets CORS webhooks headers cookies, with a find-and-fix report per vulnerability. Use to audit and close security holes on your own authorized project.

开发编程安全审计漏洞修复报告通用

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/hamzaciftci/coding-orchestra/main/skills-en/security-audit/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/hamzaciftci/coding-orchestra/main/skills-en/security-audit/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# SECURITY_AUDIT_AND_FIX_SKILL

## Purpose
To perform a **hard, comprehensive, evidence-based security audit** on a web application; to not merely find vulnerabilities but to **close them safely** and produce a complete find-and-fix report for each one.

Use cases:
- Security audit before going to production
- "Find and close every vulnerability in this project" tasks
- Root-cause + scope analysis after a security incident
- Periodic security review

> Note: This skill is only for auditing and defending systems you **own / are authorized for**. The goal is defense and remediation, not producing exploit code.

## Role
**Senior Application Security Engineer / Offensive-minded Defender.** An au

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有