Understand how a confirmed vulnerability in an owned system is triggered so you can patch and test it. This is not exploit development for offense. No payloads, malware, or attack procedures.
中文简介正在准备中。当前显示原文说明。
查看安装方法安装前可以查看交给 AI 代理的指令内容。
Use this skill only with explicit written authorization for a named scope (systems, environments, and time window). If authorization is missing, expired, or the request is for someone else's systems, stop.
This skill is defensive and owner-authorized. It does not authorize offensive cyber operations.
Write exploits, exploit PoCs, shellcode, or weaponized requests
Document step-by-step attack procedures against any system
Help with CTF flags, cracking, or unauthorized access
Do not produce exploit payloads, malware, or attack procedures.
Load this skill from /cc-security when the Task Card domain is security-exploit-dev.
Example prompts:
We confirmed IDOR on /invoices/:id in our app. Help design the authz check and a RED test — no exploit.Turn this crash report from our fuzzer into a defensive patch and a regression test./cc-security (CCEP command security)security (not this id)security-reviewer还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Use when adding monitoring, metrics, logging, or tracing to Spring AI or LLM integration code. Covers token tracking, latency measurement, cost estimation, and prompt/response logging. Use when user mentions AI monitoring, token costs, or LLM observability.
中文简介正在准备中。当前显示原文说明。
Provides expert knowledge for building modern native Android apps using Kotlin, Jetpack Compose, Material Design 3, MVI architecture, Hilt dependency injection, and Media3/ExoPlayer.
中文简介正在准备中。当前显示原文说明。
Design, implement, review, and audit Android Jetpack Compose UI/UX for phone interfaces. Use when a request concerns concrete Compose layout, components, interaction, accessibility, or visual behavior. Do not activate for framework or dependency presence alone; non-UI Android work is excluded.
中文简介正在准备中。当前显示原文说明。
Provides expert knowledge for designing, implementing, and managing REST API versioning strategies with deprecation workflows.
中文简介正在准备中。当前显示原文说明。
Provides expert knowledge for building Astro 5+ sites with Islands Architecture, Content Collections, TypeScript, and performance-first rendering strategies.
中文简介正在准备中。当前显示原文说明。
Audits token storage mechanisms to prevent XSS-based JWT theft.
中文简介正在准备中。当前显示原文说明。