Individual skill

yao-websecurity-skill

Use when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability checklist scoring, static review, dynamic review, active validation, or Chinese security reports.

skills/yao-websecurity-skill/SKILL.md

Read pinned source

Source commit 5126d4b5500a2f7d447fbe453297507d200b042e

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: No
Observed behavior: Network or broad shell
Last checked: Nov 9, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 1,327
Repository last updated: Oct 14, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

security Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

README.mddoc · 7,975 bytes
SKILL.mdcore · 4,839 bytes
SKILL.mdcore · 4,839 bytes
SKILL.mdcore · 4,839 bytes
SKILL.mdcore · 4,839 bytes
SKILL.mdcore · 4,839 bytes
agents/interface.yamlasset · 941 bytes
evals/semantic_config.jsonasset · 6,549 bytes
evals/trigger_cases.jsonasset · 3,570 bytes
examples/fictional-starbridge-audit/README.mddoc · 1,437 bytes
examples/fictional-starbridge-audit/security_review.sanitized.jsonasset · 488,785 bytes
examples/fictional-starbridge-audit/安全审查报告.htmlasset · 785,287 bytes
examples/fictional-starbridge-audit/安全审查报告.mddoc · 279,590 bytes
examples/fictional-starbridge-audit/安全审查报告.pdfasset · 2,754,309 bytes
examples/fictional-starbridge-audit/安全审查评分表.xlsxasset · 102,365 bytes
examples/sample-review-note.mddoc · 539 bytes
manifest.jsonasset · 1,203 bytes
references/report-contract.mddoc · 12,008 bytes
references/review-modes.mddoc · 2,465 bytes
references/scanner-registry.mddoc · 3,816 bytes
references/security-audit-method.mddoc · 8,748 bytes
references/source-benchmark-scan.mddoc · 2,529 bytes
references/vulnerability-ontology.csvasset · 37,939 bytes
references/网站安全审查AI_Skill设计与漏洞知识库报告.docxasset · 74,531 bytes
reports/artifact-design-profile.mddoc · 1,988 bytes
reports/output-risk-profile.mddoc · 1,886 bytes
reports/reference-synthesis.mddoc · 1,104 bytes
reports/validation-results.mddoc · 1,787 bytes
scripts/security_audit_report.pyruns · 110,627 bytes
templates/review-template.jsonasset · 1,913 bytes
tests/test_security_audit_report.pyruns · 9,531 bytes

Read excerpt


# Yao Websecurity Skill

## Use

Use when the user gives a local path, archive, GitHub repo, staging URL, or owned runtime and wants a defensive website security audit, vulnerability checklist review, scorecard, remediation plan, static review, dynamic review, active validation, or Excel/HTML/Markdown/PDF report.

Do not use for unauthorized targets, exploit development, credential theft, stealth, malware, third-party public-target scanning, or bypass instructions.

## Required Reading

- `references/security-audit-method.md`
- `references/report-contract.md`
- `references/review-modes.md`
- `references/vulnerability-ontology.csv`