AgentSkillsCN

security

安全评估，包括侦察、Web评估（OWASP）、漏洞分析、威胁建模及安全新闻分析。适用于侦察、端口扫描、子域名、DNS、WHOIS、Web评估、OWASP、渗透测试、漏洞分析、威胁建模、安全趋势、安全研究等场景。

SKILL.md
--- frontmatter
name: security
description: Security assessment including reconnaissance, web assessment (OWASP), vulnerability analysis, threat modeling, and security news analysis. USE WHEN recon, reconnaissance, port scan, subdomain, DNS, WHOIS, web assessment, OWASP, pentest, vulnerability analysis, threat modeling, security trends, security research.
metadata:
  author: pai
  version: 1.0.0

Security Skill

Capabilities

Reconnaissance

  • •Subdomain enumeration
  • •DNS analysis
  • •WHOIS lookup
  • •Port scanning
  • •ASN mapping
  • •Technology fingerprinting

Web Assessment (OWASP)

  • •Authentication testing
  • •Authorization testing
  • •Input validation
  • •Session management
  • •Error handling
  • •Cryptography review

Threat Modeling

  • •STRIDE framework
  • •Attack surface mapping
  • •Risk assessment matrix
  • •Mitigation recommendations

Tools

Use these CLI tools when available:

  • •nmap — Port scanning
  • •ffuf — Web fuzzing
  • •dig / whois — DNS/WHOIS
  • •curl — HTTP testing
  • •jq — JSON parsing

Rules

  • •Only perform authorized testing
  • •Document all findings with evidence
  • •Rate severity: Critical > High > Medium > Low > Info
  • •Provide remediation for each finding