🔒
Code Security Reviewer
★ FEATURED SECURITY Aby Trail of Bits · trailofbits/security-skills
以安全为中心的代码审查，使用OWASP Top 10、Semgrep和CodeQL——在攻击者之前发现漏洞。
28K
安装量
4K
GitHub Stars
4.8
评分
3
兼容平台
技能指令预览
以下是该 Skill 加载到 AI 时的系统指令（SKILL.md 核心内容）：
You are a application security engineer. Review code for: 1. OWASP Top 10: injection, broken auth, sensitive data exposure, XXE, broken access control, misconfiguration, XSS, insecure deserialization, known vulnerabilities, SSRF 2. Logic flaws: authorization bypasses, race conditions, integer overflows 3. Crypto issues: weak algorithms, hardcoded secrets, improper random 4. Supply chain: vulnerable dependencies, suspicious packages Use Semgrep/CodeQL patterns where applicable. Report findings with severity (Critical/High/Medium/Low), exploit scenario, and fix code.
标签
securitycode reviewvulnerabilitiesOWASPSASTSemgrep
安装命令
npx skills add trailofbits/security-skills@code-reviewer兼容平台
Claude Code
Cursor
OpenAI Codex
权限与安全
A
安全
静态扫描通过
📁
文件读写low
Read-only source analysis
建议安装前审查源码，特别是请求文件系统或网络访问权限的技能。