security-review

Name: security-review
Author: moyuanming

评审代码改动中的安全漏洞、认证缺口和注入风险

by moyuanming(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Imported from moyuanming/TollAuditExpress (.claude/skills/security-review/SKILL.md). Install upstream with npx skills add moyuanming/TollAuditExpress --skill security-review. Copyright stays with the author.

待评审的 Diff

!git diff $ARGUMENTS

请围绕下面这些点审查上面的改动：

注入漏洞，例如 SQL、XSS、command 注入
认证和授权缺口
硬编码的 secret 或凭据

完整检查项请参考当前 skill 目录下的 checklist.md。

输出问题时请附带严重级别和修复步骤。

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

moyuanming-tollauditexpress-security-review.ocm.jsonjson

{
  "ocm": "1",
  "id": "moyuanming-tollauditexpress-security-review",
  "kind": "skill",
  "name": "security-review",
  "description": "评审代码改动中的安全漏洞、认证缺口和注入风险",
  "publisher": "moyuanming",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "评审代码改动中的安全漏洞、认证缺口和注入风险"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/moyuanming/TollAuditExpress",
      "path": ".claude/skills/security-review/SKILL.md",
      "ref": "639199f3e6fecf01a8d547a38d1b0dccacb3c780",
      "url": "https://github.com/moyuanming/TollAuditExpress/blob/639199f3e6fecf01a8d547a38d1b0dccacb3c780/.claude/skills/security-review/SKILL.md",
      "key": "moyuanming/TollAuditExpress/.claude/skills/security-review/SKILL.md"
    }
  },
  "instructions": "## 待评审的 Diff\n\n!`git diff $ARGUMENTS`\n\n请围绕下面这些点审查上面的改动：\n\n1. 注入漏洞，例如 SQL、XSS、command 注入\n2. 认证和授权缺口\n3. 硬编码的 secret 或凭据\n\n完整检查项请参考当前 skill 目录下的 `checklist.md`。\n\n输出问题时请附带严重级别和修复步骤。",
  "cost": {
    "context_tokens": 43
  }
}

Fetch it by URL: GET /api/v1/registry/moyuanming-tollauditexpress-security-review/manifest?version=1.0.0

About

待评审的 Diff

Use it

Manifest

Reviews