跳到正文
cccskills

“gap”的搜索结果

1812 个 · 按相关度排序

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework to identify which phases an adversary has completed, where defenses succeeded or failed, and what controls would have interrupted the attack at earlier phases. Use when conducting post-incident analysis, building prevention-focused security controls, or mapping detection gaps to kill chain phases. Activates for requests involving kill chain analysis, intrusion kill chain, attack phase mapping, or Lockheed Martin kill chain framework.

中文简介正在准备中。当前显示原文说明。

aniket2348823/Vul-Agent22026年6月9日 更新

Review and fix OpenMetadata connector documentation against JSON schema and source code. Validates availableFeatures, permissions, yaml.mdx configuration, and overall completeness. Automatically fixes gaps.

中文简介正在准备中。当前显示原文说明。

open-metadata/docs-om22026年10月21日 更新

Generate or materially revise a repository-local test plan, QA plan, acceptance matrix, or regression checklist on explicit request or when one concrete testability gap blocks formal DEFINE; do not trigger for ordinary implementation, test execution, TDD, review, or completion claims.

中文简介正在准备中。当前显示原文说明。

Rosetears520/aili-workflows22026年9月27日 更新

Plan and synthesize a source-grounded multi-paper literature review. Use for systematic literature reviews, survey matrices, inclusion/exclusion criteria, research gaps, or "review the literature on X" requests; do not use for reviewing one paper, ordinary web summaries, citation formatting only, or medical/legal conclusions.

中文简介正在准备中。当前显示原文说明。

Rosetears520/aili-workflows22026年9月27日 更新

Resolve one exact official/current documentation gap when the user requests source verification or a version-sensitive API/SDK/provider/framework question can materially change the current decision; do not trigger for every implementation decision, ordinary framework code, local business logic, or broad research.

中文简介正在准备中。当前显示原文说明。

Rosetears520/aili-workflows22026年9月27日 更新

Research one bounded mature-project/prior-art question when the user explicitly asks how established projects handle it or ROSE names a decision-shaping prior-art gap; do not trigger automatically for IDEATE, DEFINE, BUILD, implementation, local review, or every design choice.

中文简介正在准备中。当前显示原文说明。

Rosetears520/aili-workflows22026年9月27日 更新

gpt-taste

免费

Elite UX/UI & Advanced GSAP Motion Engineer. Enforces Python-driven true randomization for layout variance, strict AIDA page structure, wide editorial typography (bans 6-line wraps), gapless bento grids, strict GSAP ScrollTriggers (pinning, stacking, scrubbing), inline micro-images, and massive section spacing.

中文简介正在准备中。当前显示原文说明。

sathishssj3/Stereix-Engine22026年10月4日 更新

Hunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidation on logout / password-change / email-change, predictable or low-entropy session IDs, JWT-as-session with no exp/revocation, refresh-token rotation/reuse-detection gaps, OAuth/SSO session linkage, device-bound-session (DBSC) downgrade, and cookie attribute issues (Secure/HttpOnly/SameSite/__Host-). Validate with TWO real sessions (attacker A + victim B), body-diff every 200, and OOB confirmation for theft chains. Medium to Critical (fixation→admin hijack, no-invalidation→persistent ATO).

中文简介正在准备中。当前显示原文说明。

ajtazer/heckit22026年10月7日 更新

Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private scoped packages and .npmrc misconfigurations where registry mappings fail to pin internal scopes exclusively. Addresses PyPI namespace attacks through --extra-index-url resolution ordering, NuGet feed priority exploitation when multiple package sources are configured without clear directives, Maven and Gradle repository ordering where artifact resolution traverses repositories sequentially, Go module proxy abuse through GOPROXY misconfiguration, Ruby gems namespace squatting, and Docker image tag confusion with unqualified image references. Provides complete proof-of-concept methodology using safe callbacks including DNS canary via interactsh or Burp Collaborator and HTTP beacon with no destructive payload. Covers reconnaissance techniques for discovering internal package names through GitHub repository analysis, error ...

中文简介正在准备中。当前显示原文说明。

ajtazer/heckit22026年10月7日 更新

Enterprise-grade code review agent. Reviews PRs, diffs, or code files for security vulnerabilities, performance issues, error handling gaps, architecture smells, and test coverage. Works with any language, any repo, no dependencies required.

中文简介正在准备中。当前显示原文说明。

johnalbertini14-glitch/openclaw-skills22026年2月26日 更新

Find keyword gaps, SERP opportunities, and low-competition high-intent keywords

中文简介正在准备中。当前显示原文说明。

ekatasingh1107/b2b-gtm-skills22026年4月12日 更新

Evaluates current go-to-market positioning versus the market. Analyzes website, content, pricing, ICP alignment, and competitive landscape to identify gaps, opportunities, and produce a GTM health report.

中文简介正在准备中。当前显示原文说明。

ekatasingh1107/b2b-gtm-skills22026年4月12日 更新