ghost-validate 是做什么的？
当用户要求“验证发现”、“检查漏洞是否真实”、“分类安全发现”、“确认漏洞”、“确定发现是真阳性还是假阳性”或提供安全发现以供审查时，应使用该技能。它通过跟踪数据流、验证利用条件、分析安全控制，并可选择在实时应用上测试攻击向量来验证安全漏洞发现。
该技能用于验证安全漏洞发现，通过跟踪数据流、验证利用条件、分析安全控制，并可选择在实时应用上测试攻击向量，以确定发现是否为真阳性或假阳性。
ghostsecurity/ghost-validate 是一个专门用于安全漏洞发现验证的 AI 技能。当用户要求“验证发现”、“检查漏洞是否真实”、“分类安全发现”、“确认漏洞”或“确定发现是真阳性还是假阳性”时，该技能会被触发。它通过系统化的方法处理安全发现：首先跟踪漏洞的数据流以确认其可达性，然后验证利用条件是否满足，接着分析相关的安全控制机制。此外，该技能支持可选的实时攻击向量测试，即在实际运行的应用中测试漏洞的可利用性。它主要与 Claude Code 等 AI 代理平台集成，帮助安全研究人员和开发人员高效地对安全发现进行初步分类，减少人工分析的工作量，并提高漏洞确认的准确性。最终，该技能输出清晰的验证结果，包括漏洞是否真实、可利用性评估以及修复建议。
npx skills add https://github.com/ghostsecurity/skills/tree/main/skills/ghost-validateInstalled? Explore more 编程与开发 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
当用户要求“验证发现”、“检查漏洞是否真实”、“分类安全发现”、“确认漏洞”、“确定发现是真阳性还是假阳性”或提供安全发现以供审查时，应使用该技能。它通过跟踪数据流、验证利用条件、分析安全控制，并可选择在实时应用上测试攻击向量来验证安全漏洞发现。
This repo contains 6 individual skills — each has its own dedicated page.
Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/stopping the proxy scoped to specific domains, viewing captured request/response logs, searching traffic by method/path/status/host, and inspecting full raw HTTP entries for security analysis. Use when the user asks to "start the proxy", "capture traffic", "intercept requests", "inspect HTTP traffic", "search captured requests", or "view request/response".
Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
Ghost Security — combined security report. Aggregates findings from all scan skills (scan-deps, scan-secrets, scan-code) into a single prioritized report focused on the highest risk, highest confidence issues. Use when the user requests a security overview, vulnerability summary, full security audit, or combined scan results.
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization, ReDoS, path traversal, zip slip). Use when the user asks for a code security audit, SAST scan, vulnerability scan of source code, or wants to find security flaws in a codebase or library.
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock.
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure.
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.