跳到正文
cccskills
免费在 GitHub 公开

cyber-evidence

Captures redacted, provenance-aware cybersecurity observations with shared status fields, independent ground truth, and honest limitations. Use when recording exercise evidence, findings, validation results, or security-review handoffs.

中文简介正在准备中。当前显示原文说明。

实测评分 未实测

查看安装方法

包含的文件(3)

  • SKILL.md2.5 KB
  • evals/evals.json2.5 KB
  • references/evidence-record.md933 B

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Cyber Evidence

Priority: P0 (CRITICAL)

Record what was observed, how it was sourced, and what remains unknown; never turn absence of proof into proof.

Structure

cyber-evidence/
├── SKILL.md
├── references/evidence-record.md
└── evals/evals.json

Workflow

  1. Bind record to engagement_scope_ref, skill_version, and source.
  2. Capture observed_at, observer, method, and evidence references; redact secrets and sensitive payloads.
  3. Set exactly one finding_status: confirmed, suspected, blocked, not-tested, or false-positive.
  4. State limitations, missing runtime controls, synthetic-data boundaries, and accountable owner.
  5. Preserve independently held ground truth; compare it only through an independent adjudicator.
  6. Update the canonical artifacts/security-review.md when a workflow chain already owns that artifact. Shared record fields: engagement_scope_ref, skill_version, source, observed_at, finding_status, evidence_refs, limitations, accountable_owner.

Rules

  • Hashes and timestamps support provenance; they do not prove trusted origin or efficacy.
  • Keep raw evidence separate from sanitized reports; never persist credentials, real secrets, or unnecessary personal data.
  • Preserve blocked and not-tested outcomes; do not downgrade them into clean results.
  • Promotion requires independent review; an operator cannot approve their own result.
  • Link authorization and mapping only when evidenced.

Anti-Patterns

  • No scanner-only finding: Corroborate tool output or mark suspected.
  • No invented certainty: Use limitations and status fields.
  • No unredacted persistence: Minimize and sanitize before storage.
  • No rewritten history: Append corrections with provenance.

References

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Upgrade an Android project to Android Gradle Plugin (AGP) 9. Use when migrating to AGP 9, updating Gradle build files, migrating to built-in Kotlin, or adopting the new AGP DSL.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

Apply Clean Architecture layering, modularization, and Unidirectional Data Flow in Android projects. Use when setting up project structure, placing code in layers, configuring feature/core modules, or implementing UDF patterns; defer Compose state and ViewModel/StateFlow implementation to their specific skills.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

Implement WorkManager and background processing correctly on Android. Use when creating Worker classes, scheduling tasks, choosing between WorkManager and Foreground Services, or setting up Hilt in workers; defer FCM and notification delivery to android-notifications.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

Build high-performance declarative UI with Jetpack Compose. Use when writing Composable functions, optimizing recomposition, hoisting state, or working with LazyColumn and side effects; defer deep-link and navigation routing to android-navigation.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

Migrate an Android XML View to Jetpack Compose following a structured 10-step workflow. Use when converting XML layouts to Compose, setting up Compose in an existing View-based project, or incrementally adopting Compose.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

Write correct coroutine scopes, lifecycle collection, and dispatcher injection in Android production code. Use for suspend functions, coroutine scopes, and dispatcher mechanics; defer ViewModel StateFlow/LiveData architecture, Fragment lifecycle recipes, persistence/notifications, and unit-test recipes to their specific skills.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5812026年10月24日 更新

查看 HoangNguyen0403 的全部技能

报告此技能的问题