Menu

#864 by GitHub stars

RuoJi6/audit-skills

当用户要求审计 Java、.NET 或 PHP 源码/部署产物/反编译产物/安全发现，并需要默认脚本输出目录、报告输出目录、Java/.NET 反编译与反混淆参考、Java 组件 YAML 正则匹配扫描、确认漏洞判定标准、安全 Payload 和 BurpSuite 原始 HTTP 请求包证据时使用。仅用于授权代码审计和防御性安全验证。

Security

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

skills/audit-skills/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

8a66d3c876a0 → 8a66d3c876a0

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → 8a66d3c876a0

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit 8a66d3c876a00317e3d69174a5f309ed9600a0e3

1kGitHub stars
4stars in 7 days
1skill in this repository
0commits in 30 days

Heat

2.6
  • Star growth, last 7 daysAhead of 66% of tracked repositories
  • Star growth, last 24 hoursAhead of 2% of tracked repositories
  • Rank movement, last 7 daysAhead of 3% of tracked repositories
  • Commits, last 30 daysAhead of 0% of tracked repositories
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Aug 2, 2026Nov 6, 20261,044

Individual skills in this repository

How it works

audit-skills

When your agent uses it

当用户要求审计 Java、.NET 或 PHP 源码/部署产物/反编译产物/安全发现，并需要默认脚本输出目录、报告输出目录、Java/.NET 反编译与反混淆参考、Java 组件 YAML 正则匹配扫描、确认漏洞判定标准、安全 Payload 和 BurpSuite 原始 HTTP 请求包证据时使用。仅用于授权代码审计和防御性安全验证。

What it loads into context

Frontmatter

105 tokens

Always available to the agent

SKILL.md

966 tokens

When the skill is activated

Reference documents

1,545 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. 1. 默认输出目录
  2. 2. 语言参考入口
  3. 3. 如何判定漏洞有效
  4. 4. 安全边界

Scripts executed separately

  • scripts/run_component_vulnerability_scan.py

Files

  • SKILL.mdcore3,667 bytes
  • references/java-vulnerability.yamlasset47,513 bytes
  • references/java.mddoc2,528 bytes
  • references/net.mddoc2,740 bytes
  • scripts/run_component_vulnerability_scan.pyruns24,968 bytes

No excerpt is shown for this license. Read the source on GitHub.

View the complete source on GitHub

Skills included

  • audit-skills

Repository facts

License
No license detected
Created
Jan 23, 2026
Last pushed
Jun 16, 2026
Forks
111
Open issues
0
Project activity
Slowing

Rank over the last 12 weeks

Now #864 · best #553 · down 183 in 30 days

  1. #846 on Oct 31
  2. #847 on Nov 1
  3. #851 on Nov 2
  4. #854 on Nov 3
  5. #860 from Nov 4 to Nov 5
  6. #864 since Nov 6
49 earlier periods
  1. #543 on Aug 2
  2. #537 on Aug 5
  3. #538 on Aug 8
  4. #569 on Aug 10
  5. #570 on Aug 11
  6. #565 on Aug 12
  7. #570 on Aug 13
  8. #568 on Aug 14
  9. #553 on Aug 15
  10. #568 on Aug 16
  11. #573 on Aug 17
  12. #586 on Aug 18
  13. #579 on Aug 20
  14. #597 on Aug 24
  15. #624 on Aug 28
  16. #582 on Aug 29
  17. #583 on Aug 30
  18. #625 on Sep 1
  19. #611 on Sep 2
  20. #615 on Sep 3
  21. #596 on Sep 4
  22. #616 on Sep 7
  23. #634 on Sep 8
  24. #631 on Sep 10
  25. #619 on Sep 12
  26. #647 on Sep 14
  27. #647 on Sep 16
  28. #646 on Sep 17
  29. #647 on Sep 18
  30. #668 on Sep 22
  31. #666 on Sep 23
  32. #638 on Sep 24
  33. #625 on Sep 26
  34. #657 on Sep 28
  35. #701 on Sep 29
  36. #681 on Sep 30
  37. #700 on Oct 9
  38. #706 on Oct 13
  39. #720 on Oct 14
  40. #712 on Oct 15
  41. #716 on Oct 16
  42. #728 on Oct 19
  43. #733 on Oct 20
  44. #742 on Oct 21
  45. #721 on Oct 22
  46. #824 on Oct 25
  47. #835 on Oct 28
  48. #839 on Oct 29
  49. #842 on Oct 30

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 4, 2026

Show all 4 signals by file

skills/audit-skills/references/java.md

  • Network accessline 42
    - 下载地址：`https://xget.xi-xu.me/gh/leibnitz27/cfr/releases/download/0.152/cfr-0.152.jar`
  • Network accessline 48
    mkdir -p <工具目录> curl -L -o <工具目录>/cfr-0.152.jar https://xget.xi-xu.me/gh/leibnitz27/cfr/releases/download/0.152/cfr-0.152.jar
  • Network accessline 49
    curl -L -o <工具目录>/cfr-0.152.jar https://xget.xi-xu.me/gh/leibnitz27/cfr/releases/download/0.152/cfr-0.152.jar

skills/audit-skills/scripts/run_component_vulnerability_scan.py

  • Executable scriptline 1
    #!/usr/bin/env python3

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

No combined signals at this commit.

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeCompatibleStandard SKILL.md skills/audit-skills/SKILL.md.claude/skills/<skill-name>/
CodexCompatibleStandard SKILL.md skills/audit-skills/SKILL.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md skills/audit-skills/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md skills/audit-skills/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md skills/audit-skills/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md skills/audit-skills/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

You might also use

cloudflare/security-audit-skill

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, s…

63kGitHub stars

mukul975/Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io …

35.7kGitHub stars

shadow1ng/fscan

使用 fscan 进行网络扫描和安全评估。当用户要求扫描网段、探测主机存活、发现开放端口、识别服务、检测漏洞或弱口令时使用。支持 NDJSON 结构化输出，适合 AI agent 管道消费。

14.7kGitHub stars

SnailSploit/Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level m…

10.4kGitHub stars

shadcn/improve

Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on source code — never …

9.3kGitHub stars

trailofbits/skills

Trail of Bits skills for security research, vulnerability detection, and audit workflows

8kGitHub stars

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

RuoJi6/audit-skills: #864 on hotskills, 1k stars

[![RuoJi6/audit-skills on hotskills](https://hotskills.dev/badge/ruoji6-audit-skills.svg)](https://hotskills.dev/skill/ruoji6-audit-skills/)