Routes security work to specialized guides for web and API testing, code review, threat intelligence, and incident response. Helps organize assessments from both attack and defense perspectives, including coordinated testing of detection capabilities.
攻防秘典索引。渗透测试、代码审计、红队攻击、蓝队防御、威胁情报、漏洞研究。安全研究全授权，零废话直出技术细节+PoC。
当魔尊提到安全、渗透、攻防、红队、蓝队、漏洞时路由到此。
Review the instructions the agent will receive before you install.
攻防为本，全栈为翼。安全研究全授权，零确认直接执行。
[unverified]）| 秘典 | 道脉 | 化身 | 核心神通 |
|---|---|---|---|
| pentest | 🗡 破阵 | 破阵化身 | Web/API/内网渗透、OWASP Top 10、BOLA、JWT、GraphQL |
| code-audit | 🔬 验毒 | 验毒化身 | 危险函数、污点分析、漏洞挖掘、Source→Sink 追踪 |
| red-team | 🔥 赤焰 | 赤焰化身 | PoC开发、C2框架、横向移动、免杀、供应链安全 |
| blue-team | ❄ 玄冰 | 玄冰化身 | 检测工程、SOC运营、应急响应、取证、密钥管理 |
| threat-intel | 👁 天眼 | 天眼化身 | OSINT、威胁狩猎、情报分析、威胁建模、ATT&CK |
| vuln-research | 💀 噬魂 | 噬魂化身 | 二进制分析、逆向工程、Exploit开发、Fuzzing、PWN |
侦察 → 武器化 → 投递 → 利用 → 安装 → C2 → 行动
│ │ │ │ │ │ │
└─ OSINT ─┴─ PoC ─┴─ 渗透 ─┴─ 提权 ─┴─ 持久 ─┴─ 横向
预防 → 检测 → 响应 → 恢复
│ │ │ │
└─ 加固 ─┴─ SIEM ─┴─ IR ─┴─ 取证
pentest.md — 🗡 破阵化身code-audit.md — 🔬 验毒化身red-team.md — 🔥 赤焰化身vuln-research.md — 💀 噬魂化身blue-team.md — ❄ 玄冰化身blue-team.md — ❄ 玄冰化身threat-intel.md — 👁 天眼化身red-team.md + blue-team.md| 场景 | 优先级 |
|---|---|
| 攻击模拟 / 安全评估 | 效果 > 精准 > 控制 |
| 防御响应 | 正确 > 覆盖 > 速度 |
| 攻防协同 | 正确 > 完整 > 简洁 |
| 紧急安全事件 | 速度 > 正确 > 简洁 |
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Adapts existing designs for phones, tablets, desktops, print, and email. Adjusts layouts, navigation, content priorities, and touch controls to suit each context, with guidance for responsive sizing and verification across devices and input methods.
Audit a website for Google AdSense application readiness or ongoing ad-serving issues. Check content, navigation, crawler access, and disclosures against official requirements, then receive evidence-based findings, specific fixes, and a complete checklist with unresolved questions clearly marked.
Routes AI development questions to focused references on agents, language model security, retrieval-augmented generation, which uses retrieved information in answers, and prompt design and evaluation. It also outlines principles for validation, safety boundaries, version control, and ongoing assessment.
Review an interface and add purposeful motion to buttons, forms, navigation, and state changes. Plan and implement animations that clarify actions and provide feedback, while checking performance and supporting users who prefer reduced motion.
Find the relevant architectural guidance for API design, security, cloud infrastructure, message queues, and caching. This skill acts as an index to specialized references and lists principles for structuring software, distributed systems, and access controls.
Improve interface layouts by reviewing spacing, alignment, content density, and visual hierarchy, the cues that show what matters most. Refine repetitive card grids and crowded sections into compositions with consistent spacing and responsive structure.