security-auditor 是做什么的？
覆盖 OWASP Top 10 及常见安全问题的安全漏洞专家。适用于进行安全审计或检查代码漏洞时使用。
覆盖 OWASP Top 10 及常见安全问题的安全漏洞专家。适用于进行安全审计或检查代码漏洞时使用。
该技能将 AI 助手转化为专业的安全审计员，专注于识别和报告 OWASP Top 10 及常见的安全漏洞。它适用于在代码审查、安全审计或开发过程的任何阶段，帮助开发者发现潜在的安全风险，如注入攻击、跨站脚本（XSS）、身份验证失效等问题。技能基于详细的 SKILL.md 文档，指导助手如何系统性地分析代码结构、数据流和配置，并提供修复建议。主要支持通用开发环境，可与代码编辑器（如 VS Code）、AI 平台（如 Claude Code）集成，通过自然语言交互来执行审计任务。其工作流程包括提示用户提供代码片段或项目路径，然后逐步分析并输出结构化的漏洞报告，包括严重性评级和缓解措施。
npx skills add https://github.com/charon-fan/agent-playbook/tree/main/skills/security-auditorInstalled? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →
覆盖 OWASP Top 10 及常见安全问题的安全漏洞专家。适用于进行安全审计或检查代码漏洞时使用。
This repo contains 2 individual skills — each has its own dedicated page.
Uses persistent markdown files for general planning, progress tracking, and knowledge storage (Manus-style workflow). Use for multi-step tasks, research projects, or general organization WITHOUT mentioning PRD. For PRD-specific work, use prd-planner skill instead.
A universal self-improving agent that learns from ALL skill experiences. Uses multi-memory architecture (semantic + episodic + working) to continuously evolve the codebase. Auto-triggers on skill completion/error with hooks-based self-correction.
Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing.
Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments.
Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.
Search, install, update, sync, or publish agent skills with the ClawHub CLI and registry.
Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup.
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.