跳到正文
cccskills
免费在 GitHub 公开

vuln-check

Review resolved dependency versions and relevant code for security vulnerabilities. Get findings with evidence, impact, and targeted remedies, distinguishing published dependency warnings from exploit paths demonstrated in the project.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Check resolved dependencies and relevant code paths for security vulnerabilities. Use for security checks or /vuln-check; use audit for a broader correctness and maintainability assessment.

查看安装方法

适用场景

  • Check dependencies for known vulnerabilities
  • Trace untrusted input to sensitive operations
  • Locate potential secrets in committed files
  • Prioritize security fixes using evidence

包含的文件(1)

  • SKILL.md1.8 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Assess the requested security surface with evidence. A check returns findings; implement remediation when the user has requested it.

  1. Read package.json and pnpm-lock.yaml for the affected dependency paths. Use current advisory data, such as pnpm audit, and record the resolved version, advisory, affected range, and verified fixed version where available. Distinguish a dependency advisory match from a demonstrated exploit path in this project.
  2. Trace untrusted inputs through guards to sensitive operations: shell execution, filesystem access, plugin capabilities, and terminal escape output. For paths, check containment and symlink behavior where relevant; normalization alone does not prevent traversal. Inspect actual validation and authorization before treating a suspicious API as a vulnerability. Scan committed repository files for potential secrets; report only the path, line, and secret type, never the value or a source excerpt.
  3. Report findings by severity with location, trigger, impact, evidence, and the smallest effective remedy. Separate confirmed issues from leads needing verification. Preserve the upstream peer/dev dependency contract when proposing upgrades.
  4. State the scope, sources checked, and gaps. If advisories are unavailable, report that the dependency check is incomplete; absence of findings is not a claim that the project is vulnerability-free.

Report potential secrets only by path, line, and type, never their value or a source excerpt. Do not run automatic dependency fixes as part of a check; for requested remediation, make targeted changes and validate the affected paths.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

audit

免费

Audit a repository or broad subsystem for security, correctness, and maintenance risks. Trace how inputs reach affected behavior, verify suspected defects, and report confirmed findings with severity, triggers, impact, and practical remedies.

中文简介正在准备中。当前显示英语简介。

  • Auditing risks across a repository
  • Checking state loss and resource limits in a TUI
  • Checking dependencies for known vulnerabilities
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

bug

免费

Turn a reported defect into a concise bug report or issue draft that someone else can reproduce or investigate. Organize symptoms, reproduction steps, expected and actual behavior, environment, and impact while separating evidence from unknowns.

中文简介正在准备中。当前显示英语简介。

  • Turning a defect description into a bug report
  • Organizing reproduction steps and expected behavior
  • Adding evidence from logs and relevant code
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

Answer questions about dsh-tui using its bundled manuals. Find relevant guidance on installation, shortcuts, configuration, themes, session migration, and VS Code integration, then cite the source file and section for checking.

中文简介正在准备中。当前显示英语简介。

  • Looking up shortcuts and everyday operations
  • Checking configuration and theme settings
  • Finding guidance for migrating sessions
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

pr

免费

Prepare and publish a pull request with a linked issue, English commit and PR titles, and a Chinese description explaining the change, implementation, and verification. Update an existing branch PR and report its URL and CI status.

中文简介正在准备中。当前显示英语简介。

  • Publishing current code changes as a pull request
  • Rewriting a PR description to match the final changes
  • Adding diagrams and rendered terminal output to a PR
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

Turn existing pull request review comments into prioritized next steps by checking them against the current code. Separate outstanding concerns, addressed feedback, and questions needing replies, then implement and validate fixes when requested.

中文简介正在准备中。当前显示英语简介。

  • Prioritizing pull request review feedback
  • Checking whether comments still apply to current code
  • Implementing and validating requested review fixes
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

practice

免费

Practice one programming concept through a small exercise matched to your goals, experience, and available time. Get feedback based on observable results, with hints or explained solutions and a harder variation when you are ready.

中文简介正在准备中。当前显示英语简介。

  • Practicing a programming concept in 10–15 minutes
  • Understanding display width for CJK characters and emoji
  • Tracing event order and cleanup
ccch1mneyyy/dsh-TUI51532026年10月21日 更新

查看 ccch1mneyyy 的全部技能

报告此技能的问题