跳到正文
cccskills

测试与安全技能

测试设计、漏洞检测、质量保证(1.3万 个)

按价格或排序方式筛选

Build repeatable evaluations for AI agent responses, tool choices, and multi-step tasks. Use reference datasets and scoring criteria to compare changes, detect quality regressions, and set automated checks that must pass before deployment.

中文简介正在准备中。当前显示英语简介。

  • Compare agent quality before and after prompt changes
  • Test tool selection and multi-step task execution
  • Evaluate resistance to prompt injection
sickn33/agentic-awesome-skills4.8万2026年10月21日 更新

Review pull requests, branches, commit ranges, or local changes with GitNexus. Combine code relationship analysis with source and test inspection to identify concrete defects, missing tests, affected behavior, and risks before merging.

中文简介正在准备中。当前显示英语简介。

  • Review a pull request before merging
  • Trace regressions beyond changed files
  • Find missing tests for changed behavior
abhigyanpatwari/GitNexus4.8万2026年10月21日 更新

Understand and extend GitNexus taint analysis, which tracks data from input sources to potentially dangerous operations. Use its implementation guidance to investigate missed or incorrect findings, add detection models, and validate analysis changes.

中文简介正在准备中。当前显示英语简介。

  • Investigating missed or incorrect data-flow findings
  • Adding input sources, dangerous operations, or sanitizers
  • Reviewing analysis that follows data across functions
abhigyanpatwari/GitNexus4.8万2026年10月21日 更新

Create a disposable Herdr session to reproduce terminal, process, API, or agent issues separately from the main session. Drive tests through the CLI or API, collect evidence of state changes, and clean up the temporary session afterward.

中文简介正在准备中。当前显示英语简介。

  • Reproducing pane, terminal, or process issues in Herdr
  • Checking agent detection and permission-related state changes
  • Collecting commands, logs, and state for a reproducible bug report
herdrdev/herdr4.5万2026年10月21日 更新

Check token security audit data before buying or swapping crypto. Review contract and trading risks, buy and sell taxes, and signs of scams such as tokens that can be bought but cannot be sold.

中文简介正在准备中。当前显示英语简介。

  • Check token risks before a purchase or swap
  • Look for tokens that can be bought but not sold
  • Review dangerous contract functions and owner controls
ccxt/ccxt4.4万2026年10月21日 更新

dogfood

Vercel 官方免费

Explore a web application as a user to find reproducible bugs and usability problems. Produce a structured report with reproduction steps, screenshots, and videos for interactive issues, giving responsible teams concrete evidence to investigate.

中文简介正在准备中。当前显示英语简介。

  • Checking a web app's quality before release
  • Testing forms and common user workflows
  • Finding confusing interfaces and visual problems
vercel-labs/agent-browser4.4万2026年10月21日 更新

claude-security

Claude 官方免费

Scan a codebase or selected changes for security issues, then request targeted patch files for findings. Independent agents verify reported issues and proposed fixes, while you review and apply patches yourself.

中文简介正在准备中。当前显示英语简介。

  • Auditing an entire repository or a selected area
  • Checking security issues in branch or pull request changes
  • Scanning a single commit
anthropics/claude-plugins-official4.4万2026年10月21日 更新

access

Claude 官方免费

Manage access to a Discord channel integration by approving pairing codes, updating allowed users, and setting direct-message and channel policies. Check pending requests and adjust reply behavior through configuration files read by the channel server.

中文简介正在准备中。当前显示英语简介。

  • Approve or deny a Discord pairing request
  • Review and update allowed users
  • Change direct-message access policies
anthropics/claude-plugins-official4.4万2026年10月21日 更新

access

Claude 官方免费

Manage access to a Telegram channel integration by approving pairing codes, updating allowed users, and setting direct-message and group policies. Check pending requests and adjust reply behavior through configuration files read by the channel server.

中文简介正在准备中。当前显示英语简介。

  • Approve or deny a Telegram pairing request
  • Review and update allowed users
  • Change direct-message access policies
anthropics/claude-plugins-official4.4万2026年10月21日 更新

Investigate prompt injection in sandboxed security challenges by tracing how untrusted text changes an agent’s decisions or tool calls. Build a minimal reproduction and preserve evidence showing where external content crosses into trusted instructions or actions.

中文简介正在准备中。当前显示英语简介。

  • Trace instructions hidden in retrieved documents
  • Investigate agent behavior changed by stored memory
  • Reproduce altered tool arguments or secret exposure
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Reproduce timing and ordering bugs in a CTF sandbox using controlled concurrent requests. Compare normal and racing runs, trace reads and writes, and preserve a minimal sequence that demonstrates duplicate actions or inconsistent state.

中文简介正在准备中。当前显示英语简介。

  • Reproduce bugs triggered by simultaneous requests
  • Investigate duplicate actions and ineffective duplicate prevention
  • Trace stale reads and gaps in locking
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Organize CTF investigations by mapping the supplied targets, tracing one minimal path, and selecting the relevant specialist workflow. Findings are grounded in observed behavior and reproducible evidence, with a clean baseline used for verification.

中文简介正在准备中。当前显示英语简介。

  • Choosing an analysis path for a CTF challenge
  • Tracing a minimal path through challenge infrastructure
  • Packaging reproducible evidence for a solution
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.

中文简介正在准备中。当前显示英语简介。

  • Inspect DPAPI-protected data and masterkeys
  • Trace credentials stored by browsers or Windows Vault
  • Identify the account or machine context needed for decryption
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Examine Windows credential material in a CTF sandbox, including LSASS memory and Kerberos tickets. Distinguish stored secrets from credentials that actually work, and document the evidence linking their source to successful authentication or resulting privileges.

中文简介正在准备中。当前显示英语简介。

  • Examining LSASS secrets and Windows logon sessions
  • Checking whether recovered Kerberos tickets are usable
  • Tracing DPAPI and SSP credential material
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Compare how proxies and backend servers interpret HTTP requests in a CTF sandbox. Use paired requests and logs to pinpoint differences in paths, headers, or message boundaries, then document a minimal reproduction of unintended routing.

中文简介正在准备中。当前显示英语简介。

  • Compare HTTP interpretation across proxies and backend servers
  • Investigate path normalization and decoding differences
  • Trace routing changes caused by ambiguous headers
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.

中文简介正在准备中。当前显示英语简介。

  • Rebuild TCP or UDP communication sessions
  • Decode HTTP, DNS, or custom protocol messages
  • Recover files transferred over the network
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace uploaded files through extraction, conversion, parsing, and reconstruction of saved objects in a CTF sandbox, an isolated competition environment. Preserve original and derived files, distinguish visible validation from backend behavior, and document the smallest reproducible processing chain.

中文简介正在准备中。当前显示英语简介。

  • Trace an uploaded file to its backend effect
  • Investigate archive extraction and preview generation
  • Compare visible validation with backend file handling
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.

中文简介正在准备中。当前显示英语简介。

  • Trace where recovered SSH keys and tokens are accepted
  • Document privilege gains through sockets or sudo
  • Explain movement between Linux challenge hosts
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace how requests become rendered pages in a CTF sandbox. Compare display restrictions with server enforcement, inspect data passed to the browser, and preserve a minimal example that demonstrates where rendering behavior diverges.

中文简介正在准备中。当前显示英语简介。

  • Trace routes through server rendering
  • Inspect page data passed to the browser
  • Compare display restrictions with handler enforcement
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace how requests travel through a CTF sandbox, from hostnames and proxy rules to containers and processes. Compare headers and live traffic to identify which service handles a request and what changes its destination.

中文简介正在准备中。当前显示英语简介。

  • Identify which container handles a request
  • Check how Host and forwarded headers affect routing
  • Trace path rewrites and WebSocket routing
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Compare GraphQL and RPC contracts, which describe expected API behavior, with generated clients and live handlers in a CTF sandbox. Identify hidden or outdated operations and preserve minimal request pairs that demonstrate the mismatch.

中文简介正在准备中。当前显示英语简介。

  • Compare API contracts with live request handling
  • Trace requests made by generated clients
  • Investigate hidden or outdated API operations
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Analyze running iOS apps in a CTF sandbox, a controlled challenge environment. Trace methods, inspect secure storage, and examine request signing and certificate checks to identify the state needed to reproduce an accepted request.

中文简介正在准备中。当前显示英语简介。

  • Trace Objective-C or Swift methods
  • Inspect Keychain and local app storage
  • Examine certificate checks and request signing
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Recover hidden malware settings and communication parameters in an isolated CTF environment. Document how values are decoded, preserve supporting evidence, and connect recovered fields to the sample’s observed behavior.

中文简介正在准备中。当前显示英语简介。

  • Recovering hidden malware configuration fields
  • Decoding command server addresses and beacon settings
  • Separating loaders from staged payloads
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新

Trace software artifacts from source and dependencies through builds, publishing, and runtime use in CTF sandboxes. Compare intended versions with shipped files to identify the earliest divergence and document the evidence linking each stage.

中文简介正在准备中。当前显示英语简介。

  • Comparing declared, resolved, and shipped dependency versions
  • Tracing package or build tampering through CI/CD
  • Identifying the artifact actually used at runtime
zhaoxuya520/reverse-skill4.3万2026年9月22日 更新