Not in the top 1,000 by GitHub stars
tanweai/xianzhi-research
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
5be2798b5c1a → 5be2798b5c1a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 5be2798b5c1a
No earlier version was observed for comparison.
Heat
1.7- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
How it works
vuln-research
When your agent uses it
安全研究元思考方法论 - 从先知社区5600+篇安全文档中提炼的漏洞挖掘方法论框架。 Use this skill when: - 进行漏洞挖掘和安全研究时，需要系统化的思考框架 - 分析特定类型漏洞（Web注入、反序列化、二进制、域渗透等）的攻击路径 - 需要了解绕过防护措施（WAF、EDR、沙箱）的思维模式 - 进行代码审计需要Source-Sink分析方法论 - 红队攻防需要完整攻击链规划 - CTF竞赛需要快速解题思路 - 逆向分析恶意软件需要方法论指导 Triggers: 漏洞挖掘、安全研究、渗透测试、代码审计、红队攻防、CTF、逆向分析、 WAF绕过、免杀、提权、横向移动、域渗透、反序列化、二进制安全、Fuzzing
What it loads into context
Frontmatter
250 tokensAlways available to the agent
SKILL.md
1,659 tokensWhen the skill is activated
Reference documents
20,353 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 核心元思考模型
- 快速导航
- 元思考原则
- 使用指南
- 核心洞察速查
Files
README.mddoc15,910 bytesSKILL.mdcore6,350 bytesreferences/binary-exploitation.mddoc5,837 bytesreferences/case-index.mddoc5,913 bytesreferences/domain-pentest.mddoc5,608 bytesreferences/fuzzing.mddoc4,882 bytesreferences/privilege-bypass.mddoc4,573 bytesreferences/rce-persistence.mddoc11,781 bytesreferences/redteam-ctf.mddoc5,142 bytesreferences/reverse-engineering.mddoc5,830 bytesreferences/web-injection.mddoc4,980 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- vuln-research
Repository facts
- License
- No license detected
- Created
- Jan 29, 2026
- Last pushed
- Jan 29, 2026
- Forks
- 27
- Open issues
- 2
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
- No broad tool permissions
- 3 dangerous shell commandsin 2 files: references/privilege-bypass.md:36 references/case-index.md:89
- 6 network referencesin 1 file: README.md:1
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- No access to secrets
- No requests to vote in Hot
Show all 9 signals by file
README.md
- Network accessline 1
# 公众号搜索“探微杜渐人工智能” 微信群已经满了 可以加我微信 拉你进群 <img width="200" alt="微信二维码" src="https://github.com/user-attachments/assets/3bc7a5b4-a975-4cda-be6d-b662b117cbea" /> - Network accessline 3
<img width="200" alt="微信二维码" src="https://github.com/user-attachments/assets/3bc7a5b4-a975-4cda-be6d-b662b117cbea" /> - Network accessline 10
[](https://opensource.org/licenses/MIT) - Network accessline 106
<img width="600" alt="场景一：漏洞挖掘思路" src="https://github.com/user-attachments/assets/32482679-ee04-491a-9af7-95cbe7ecbfb3" /> - Network accessline 116
<img width="600" alt="场景二：渗透路径规划" src="https://github.com/user-attachments/assets/ffdeee4d-1b99-4142-a76b-ac50f046e5fd" /> - Network accessline 307
git clone https://github.com/tanweai/xianzhi-research.git ~/.claudeg/skills/vuln-research
references/case-index.md
- Dangerous shell operationline 89
| CVE-2021-3156 | sudo | 缓冲区溢出(Baron Samedit) |
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Signal confidence: 9 facts
- Network access in prose of documentationREADME.md:1Low confidence
- Network access in prose of documentationREADME.md:3Low confidence
- Network access in prose of documentationREADME.md:10Low confidence
- Network access in prose of documentationREADME.md:106Low confidence
- Network access in prose of documentationREADME.md:116Low confidence
- Network access in code of documentationREADME.md:307Low confidence
- Dangerous shell operation in prose of documentationreferences/case-index.md:89Low confidence
- Dangerous shell operation in prose of documentationreferences/privilege-bypass.md:36Low confidence
- Dangerous shell operation in prose of documentationreferences/privilege-bypass.md:46Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
