Updated 3mo ago
by zhiyuwang720-dev
CodeAuditSkill
CodeAuditSkill 是一个运行在 Claude Code 中的 Web 项目安全代码审计/漏洞挖掘 Skill, 已经获得了40余个CNVD漏洞编号。 给定一个 Web 项目目录,自动识别语言与框架,按语言专属漏洞清单进行系统化源码审计,对每条高中危漏洞并行启动子 Agent 进行可利用性验证,最终输出可交付的审计报告。
51 GitHub stars (51)
+3 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | 0 |
| Oct 19 | +1 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | +1 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | +1 |
| Nov 4 | 0 |
| Nov 5 | 0 |
- 1 skill (1 skills found in its SKILL.md files)
- 0 forks (0 forks)
- 3mo ago last update (Last updated 3mo ago)
Install
Skills CLI
npx skills add zhiyuwang720-dev/CodeAuditSkill
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/zhiyuwang720-dev/CodeAuditSkillcp -r "CodeAuditSkill/skills/web-vuln-audit" ~/.claude/skills/
Copies the web-vuln-audit skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add zhiyuwang720-dev/CodeAuditSkill
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
web-vuln-audit
Web 项目安全代码审计 skill,自动识别 Go / Java / Python / PHP / JavaScript 项目类型并加载对应漏洞清单(SQL/SSRF/XSS/CSRF/反序列化/路径穿越/鉴权/命令注入/XXE 等),输出审计报告到被审计项目的 reports/ 目录。适用于:(1) 单仓库 Web 项目的中高危漏洞扫描,(2) 自动生成可复现的漏洞报告(含代码位置、复现 curl、修复建议、修复后验证),(3) 对每条漏洞并行启动子 Agent 进行可利用性验证,输出 PoC 步骤或误判说明。只审计 High/Medium,跳过 Low。
skills/web-vuln-audit/ on GitHub (opens in a new tab)SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.