Security

安全评估与情报——网络侦察、Web应用安全测试、提示注入测试、安全新闻监测及年度报告分析。适用于侦察、网络侦察、端口扫描、子域名、DNS、WHOIS、ASN、网段、CIDR、批量扫描、路径发现、端点发现、企业结构、赏金计划、IP侦察、域名侦察、被动侦察、Web评估、OWASP、渗透测试、威胁模型、漏洞分析、ffuf、Playwright、Gemini分析、提示注入、越狱、LLM安全、护栏绕过、直接注入、间接注入、多阶段攻击、安全新闻、安全更新、漏洞、tldrsec、安全研究、年度报告、威胁态势、安全趋势、供应商报告、获取报告、列出来源等场景。

SKILL.md

--- frontmatter

name: Security
description: Security assessment and intelligence — network reconnaissance, web app security testing, prompt injection testing, security news monitoring, and annual report analysis. USE WHEN recon, reconnaissance, port scan, subdomain, DNS, WHOIS, ASN, netblock, CIDR, mass scan, path discovery, endpoint discovery, corporate structure, bounty programs, IP recon, domain recon, passive recon, web assessment, OWASP, pentest, threat model, vulnerability analysis, ffuf, Playwright, Gemini analysis, prompt injection, jailbreak, LLM security, guardrail bypass, direct injection, indirect injection, multi-stage attack, security news, sec updates, breaches, tldrsec, security research, annual reports, threat landscape, security trends, vendor reports, fetch report, list sources.

Security

Unified skill for security assessment and intelligence workflows.

Workflow Routing

Request Pattern	Route To
Recon, reconnaissance, port scan, subdomain, DNS, WHOIS, ASN	`Recon/SKILL.md`
Web assessment, OWASP, pentest, ffuf, app security, threat modeling	`WebAssessment/SKILL.md`
Prompt injection, jailbreak, LLM security, guardrail bypass	`PromptInjection/SKILL.md`
Security news, sec updates, breaches, tldrsec, security research	`SECUpdates/SKILL.md`
Annual reports, security trends, threat landscape, vendor reports	`AnnualReports/SKILL.md`