ghost-proxy 是做什么的？
启动并控制 reaper MITM 代理，以捕获、检查、搜索和重放客户端与服务器之间的 HTTP/HTTPS 流量。功能包括：启动/停止指定域名的代理、查看捕获的请求/响应日志、按方法/路径/状态/主机搜索流量，以及检查完整的原始 HTTP 条目以进行安全分析。当用户提出“启动代理”、“捕获流量”、“拦截请求”、“检查 HTTP 流量”、“搜索捕获的请求”或“查看请求/响应”时使用此技能。
启动并控制 reaper MITM 代理，以捕获、检查、搜索和重放客户端与服务器之间的 HTTP/HTTPS 流量。支持启动/停止指定域名的代理、查看捕获的请求/响应日志、按方法/路径/状态/主机搜索流量，以及检查完整的原始 HTTP 条目以进行安全分析。
ghostsecurity/ghost-proxy 是一项 AI 代理技能，专注于管理和操作 reaper MITM（中间人）代理。其主要功能包括启动和停止作用于特定域名的代理、记录并查看客户端与服务器间的 HTTP/HTTPS 请求与响应数据。用户可以利用该技能轻松地搜索捕获的流量，例如根据 HTTP 方法、路径、状态码或主机进行过滤，并深入检查完整的原始 HTTP 条目以进行安全审计。该技能适用于多种 AI 代理平台，如 Claude Code、Cursor 或 Codex 等。它通过将用户自然语言指令（如“启动代理”、“捕获流量”或“查看请求/响应”）转换为底层代理控制命令来工作，从而简化了渗透测试与流量分析中的关键任务。开发者或安全分析师可以使用该技能拦截、检查和重放 HTTP 流量，而无需手动管理复杂的代理配置。
npx skills add https://github.com/ghostsecurity/skills/tree/main/skills/ghost-proxyInstalled? Explore more 研究与数据分析 skills: affaan-m/uspto-database, affaan-m/scholar-evaluation, affaan-m/literature-review · View all 6 →
启动并控制 reaper MITM 代理，以捕获、检查、搜索和重放客户端与服务器之间的 HTTP/HTTPS 流量。功能包括：启动/停止指定域名的代理、查看捕获的请求/响应日志、按方法/路径/状态/主机搜索流量，以及检查完整的原始 HTTP 条目以进行安全分析。当用户提出“启动代理”、“捕获流量”、“拦截请求”、“检查 HTTP 流量”、“搜索捕获的请求”或“查看请求/响应”时使用此技能。
This repo contains 6 individual skills — each has its own dedicated page.
Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report focused on the highest risk, highest confidence issues. Use when the user requests a security overview, vulnerability summary, full security audit, or combined scan results.
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization, ReDoS, path traversal, zip slip). Use when the user asks for a code security audit, SAST scan, vulnerability scan of source code, or wants to find security flaws in a codebase or library.
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock.
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure.
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerability findings by tracing data flows, verifying exploit conditions, analyzing security controls, and optionally testing attack vectors against a live application.
USPTO patent and trademark data workflow for official record lookup, PatentSearch queries, TSDR checks, assignment data, and reproducible IP research logs.
Structured scholarly-work evaluation for papers, proposals, literature reviews, methods sections, evidence quality, citation support, and research-writing feedback.
Systematic literature-review workflow for academic, biomedical, technical, and scientific topics, including search planning, source screening, synthesis, citation checks, and evidence logging.
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Agent skill repository discovered by 10x-chat research.
Review backend code for quality, security, maintainability, and best practices based on established checklist rules. Use when the user requests a review, analysis, or improvement of backend files (e.g., `.py`) under the `api/` directory. Do NOT use for frontend files (e.g., `.tsx`, `.ts`, `.js`). Supports pending-change review, code snippets review, and file-focused review.