recognize-attack-surface SKILL.md skillA
recognize-attack-surface from galact-byte/galact-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add galact-byte/galact-skills/recognize-attack-surface@git:20260806.90c82e7Pins git:20260806.90c82e7 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- galact-byte/galact-skills
- Path
skills/recognize-attack-surface/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260806.90c82e7, committed Aug 6, 2026
- First version recorded
- Aug 6, 2026
- Size
- 5,971 bytes
- Repository stars
- 7
- License
- a license file GitHub does not identify
渗透测试的攻击面识别与研判总线：拿到一个目标或功能点时，先用它判断"这里可能是哪类漏洞、该用哪个 hunt skill"，并覆盖没有专用 hunt skill 的横切类别——跨组件攻击链、业务逻辑漏洞、安全配置错误、信息泄露。当用户说"从哪下手""这个功能可能有什么问题""帮我看看攻击面""该测哪类漏洞""怎么把几个小问题串成大的"时使用；也在每次渗透开局做侦察分诊时使用。输出：识别出的可疑信号 + 路由到的 hunt skill 清单 + 横切类别的研判结论。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# recognize-attack-surface · 攻击面识别与研判 这是渗透 skill 库的**分诊总线**：不直接挖某一类漏洞，而是看清目标后判断"该往哪个 hunt skill 走"，并亲自处理四类**不适合做成单点猎杀**的横切问题——跨组件攻击链、业务逻辑、配置错误、信息泄露。 用法心智：先侦察→按信号路由到具体 hunt skill→对横切类别用本文的研判清单→把散点串成链。深度案例与信号目录见 `references/patterns.md`（渐进披露，判定某类时再读对应段）。 ## 何时用哪个 hunt skill（路由表） 看到左边信号，转右边 skill： | 观察到的信号 | 路由到 | |---|---| | 服务端按用户 URL 发出站请求（预览/抓取/webhook/导入） | `hunt-ssrf` | | 前面有 CDN/反代 + keep-alive，怀疑前后端解析不一致 | `hunt-request-smuggling` | | 输入进 shell / 传给 git/tar/ffmpeg/ImageMagick 参数 | `hunt-command-injection` | | 文件名/路径/下载/解压吃用户输入 | `hunt-path-traversal` | | 依赖 Node.js 权限模型做隔离 | `hunt-nodejs-permission-bypass` | | cookie/token/viewstate 是序列化对象；导入触发对象还原 | `hunt-deserialization` | | 递归 merge/JSON 深合并/`__proto__` 可控 | `hunt-prototype-pollution` | | 登录/SSO/SAML/OAuth/2FA/重置/邮箱验证环节 | `hunt-auth-bypass` | | 用户输入回显到 HTML/JS/属性，或前端 sink 消费 URL | `hunt-xss` | | 解析用户 XML（SOAP/SVG/SAML/DOCX/RSS） | `hunt-xxe` | | 输入拼进 SQL/NoSQL 查询 | `hunt-sqli` | | 状态变更操作的 CSRF 防护可疑 | `hunt-csrf` | | 前有缓存层 + unkeyed 输入影响响应 | `hunt-cache-poisoning` | | 按用户参数跳转（next/return/redirect_uri） | `hunt-open-redirect` | 一个入口常命中多个——按"最高影响 + 最省条件"排序逐个试。找不到匹配就落到下面四类横切研判。 ## 横切类别研判（无专用 hunt skill，本文直接处理） …
Read the whole file at its exact version.
How to install
mdr add galact-byte/galact-skills/recognize-attack-surface@sha256:752381e701e5ddb4The line at the top of this page pins the label git:20260806.90c82e7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_72faihutmoobp7pt)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Aug 6, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260806.90c82e7 latest | 2026-08-06 | 90c82e7 | 5,971 B | A | view · diff |
| git:20260806.4d28a84 | 2026-08-06 | 4d28a84 | 5,939 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5971 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
galact-byte/galact-skills · 7 stars · license a license file GitHub does not identify · pushed 2026-10-12 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_72faihutmoobp7pt GET https://markdownregistry.com/api/v1/resolve?ref=galact-byte/galact-skills/recognize-attack-surface GET https://markdownregistry.com/api/v1/blob/752381e701e5ddb4f1f8467f3ea8715516562c93b3a9a176251400547c7d5c94
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.