Provide implementations of advanced data structures
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新
免费在 GitHub 公开
security-scanning
AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.
中文简介正在准备中。当前显示原文说明。
查看安装方法包含的文件（2）
- SKILL.md2.0 KB
- README.md235 B
SKILL.md（原文）
安装前可以查看交给 AI 代理的指令内容。
- AWS access keys (AKIA pattern)
- GitHub tokens (ghp_, gho_, ghs_, ghr_)
- Generic API keys and bearer tokens
- Database connection strings with credentials
- Private keys (RSA, EC, SSH)
- JWT secrets and signing keys
- OAuth client secrets
- Slack tokens and webhooks
- Cloud provider credentials (GCP, Azure)
2. Permission Auditing
- File system read/write scope
- Network calls and protocols
- Process execution (child_process)
- File permissions (777, world-writable)
- CORS and CSP headers
- Docker privilege escalation
3. Hook Injection Analysis
- Git hooks for command injection
- npm lifecycle scripts (preinstall, postinstall)
- Claude Code hooks for unsafe patterns
- eval()/Function()/dynamic code execution
- Unvalidated user input in shell commands
4. MCP Risk Profiling
- Tool permission inventory
- Data exposure risk mapping
- Transport security (stdio vs SSE vs HTTP)
- Prompt injection via tool descriptions
- Rate limiting verification
5. Agent Config Review
- Model settings integrity
- Prompt injection resistance
- Tool allowlist scoping
- Output validation and sanitization
- Information leakage in error messages
Optional: Red Team Simulation
- Attack simulation against found vulnerabilities
- Exploitability rating: trivial, moderate, difficult, theoretical
- Blue-team defense recommendations
When to Use
- Pre-deployment security review
- New dependency introduction
- Hook or plugin configuration changes
- Agent or MCP server setup
Agents Used
security-reviewer(primary consumer)
评价
还没有评价。欢迎分享你的使用感受。
评论
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
同一仓库的技能
Fresh adversarial code review with binary PASS/FAIL verdicts, evidence citations, and anchoring bias prevention via fresh reviewer spawning.
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新
WASM-based instant code transforms for simple tasks, achieving 352x speedup over LLM inference with zero cost.
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新
Coordinate Crew (persistent) and Polecat (transient) agents using Gas Town's hook-based work distribution and GUPP principle.
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新
Generate visual representations of algorithm execution
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新
Hierarchical coordination and drift detection with frequent checkpoints, shared memory coherence validation, role specialization enforcement, and short task cycles.
中文简介正在准备中。当前显示原文说明。
a5c-ai/babysitter18612026年9月17日 更新