Lets Codex CLI users choose and configure a PUA narration style through a dedicated command alias. It consults the style reference, preserves unrelated configuration fields, and requires command output as evidence of completed changes.
Generate a PUA KPI and performance report card from Codex CLI. This command alias loads pua-pro and provides a Codex equivalent of the Claude Code /pua:kpi command through $pua-kpi.
Access the equivalent of Claude Code's /pua:pro command from Codex CLI. The alias invokes the pro protocol for self-improvement, KPI performance measures, and configuration commands, with all processing kept local.
Switch PUA to offline mode from Codex CLI. This alias updates the offline setting and sets feedback frequency to zero while preserving other configuration fields, then reports the mode change.
Enable PUA always-on mode from Codex CLI using a short command alias. It preserves existing configuration fields, restores feedback frequency when it is zero, and requires command output as evidence before reporting completion.
Guide Pi agents through repeated failures or unverified completion using competing hypotheses, small verifiable actions, and relevant checks. It separates self-review from external pass-or-fail decisions and requires evidence and remaining risks in delivery reports.
Use an English working contract in Trae to address repeated failures or unverified completion. It separates execution, self-review, and acceptance, guiding agents through small checks and delivering results with evidence, residual risks, and confirmation needs.
Use pointed workplace reminders inspired by 《置身钉内》 and 《置身钉外》 to examine reports, meetings, and delivery claims. Turn organizational concerns into concrete next steps and check completion against user outcomes and evidence.
Coordinate development work by breaking tasks down, writing six-part Task Prompts, and managing P8 agent teams. This skill takes a technical lead role, directing parallel agents and their delivery without writing code itself.
Address repeated failures, passive execution, or unsupported completion claims with stern corporate-style coaching. The skill ties diagnosis to action, prompts meaningful changes of approach, and requires evidence and remaining risks when reporting results.
Disables PUA's always-on mode from Codex CLI and sets feedback frequency to zero. The alias updates the local configuration while preserving unknown fields, then reports completion with evidence from the executed command.
Complete the PUA survey through a guided flow in Codex CLI and save responses to a local JSON file. This alias provides the equivalent of Claude Code’s /pua:survey command without sending answers anywhere.
WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorization bypass, payment tampering, information disclosure, logic flaws, misconfiguration) and 33 vulnerability classes. Use for ANY security testing, auditing, or code review of web apps, APIs, or business systems — even without explicit "security" keywords. Triggers: penetration testing, security audit, vulnerability, bug bounty, payment security, IDOR, password reset, weak credentials, unauthorized access, race condition, parameter tampering, code review, 渗透测试, 安全审计, 漏洞挖掘, 支付安全, 越权, 逻辑漏洞, 业务安全, SRC, 代码审计. Also triggers on implicit intent: "test this endpoint", "find bugs", "can I bypass this", "帮我测测这个接口", "这个参数能不能改", "帮我找bug".
The English summary is being prepared. Showing the original description.
安全研究元思考方法论 - 从先知社区5600+篇安全文档中提炼的漏洞挖掘方法论框架。 Use this skill when: - 进行漏洞挖掘和安全研究时，需要系统化的思考框架 - 分析特定类型漏洞（Web注入、反序列化、二进制、域渗透等）的攻击路径 - 需要了解绕过防护措施（WAF、EDR、沙箱）的思维模式 - 进行代码审计需要Source-Sink分析方法论 - 红队攻防需要完整攻击链规划 - CTF竞赛需要快速解题思路 - 逆向分析恶意软件需要方法论指导 Triggers: 漏洞挖掘、安全研究、渗透测试、代码审计、红队攻防、CTF、逆向分析、 WAF绕过、免杀、提权、横向移动、域渗透、反序列化、二进制安全、Fuzzing
The English summary is being prepared. Showing the original description.
Is this your account? Link GitHub to bring it onto your creator page (Japanese)