Extract DPAPI-protected secrets such as credentials and browser data offline and online.
中文简介正在准备中。当前显示原文说明。
Code comment hygiene for AI coding agents: remove generic AI-slop comments, keep the valuable ones, never touch the code.
中文简介正在准备中。当前显示原文说明。
查看安装方法安装前可以查看交给 AI 代理的指令内容。
Anti Slop: Rules for AI Coding Agents. Code Comments skill
Part of the antislop system. Read together with
antislop.md(the core). This skill filters comments that read as generically AI (decorative, restating the obvious, stiff, loud) while preserving the comments that carry real information. It references core rules by number and never duplicates or renumbers them. Load it when the task writes or edits code comments.
antislop.md whenever the task touches code comments. The core holds the mechanism (the purpose test, the three tiers, the Delivery Gate); this skill holds comment-specific depth.// ======================= around Authentication, // -------- WORKFLOW --------, or a /* ---- ROUTES ---- */ header.= or - signals "AI made this" without adding information, and ALL CAPS reads as shouting.// Initialize the variable above let count = 0, // User class above class User {}, // Validate user above function validateUser(), or const userAge = 25; // User age is 25.// Step 1: Validate input, // Step 2: Process request, // Step 3: Return response, or // First..., // Next..., // Finally....// Main logic, // Core logic, // Business logic, // Helper function, // Entry point, // Error handling, or // Note: This is important. / // Important: Please read.// TODO: Improve this, // Future improvements, // Additional optimization can be added here, // Add more validation.@param price The price. and @returns Total price. for a function whose name and parameters already say all of it.// ✅ Validation or // 🚀 Performance.} // end if, # End of function, or // End processOrder.// Initialize count, then // Loop items, then // Get item, then // Increment, then // Return result.// MAIN LOGIC in caps.// Validate credentials before issuing a token. Good comments explain why, not what, and they stay short.Never remove comments that explain:
Example that must stay:
// Stripe may retry webhook deliveries for up to three days.
// Ignore duplicate events using the event ID.
A comment earns its place when it explains something the code does not already show: the reason, the constraint, the non-obvious behavior.
Run these alongside the core Delivery Gate when the task touches comments. All answers must be yes:
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Extract DPAPI-protected secrets such as credentials and browser data offline and online.
中文简介正在准备中。当前显示原文说明。
Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.
中文简介正在准备中。当前显示原文说明。
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.
中文简介正在准备中。当前显示原文说明。
Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.
中文简介正在准备中。当前显示原文说明。
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
中文简介正在准备中。当前显示原文说明。
Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
中文简介正在准备中。当前显示原文说明。