incident-response SKILL.md skillA
incident-response from perrylink/dsh-skill-pack-security is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add perrylink/dsh-skill-pack-security/incident-response@v2.2.25Pins v2.2.25 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- perrylink/dsh-skill-pack-security
- Path
skills/incident-response/SKILL.md- Versions recorded
- 13
- Latest version
- v2.2.25, committed Oct 31, 2026
- First version recorded
- Sep 7, 2026
- Size
- 4,860 bytes
- Repository stars
- 22
- License
- Apache-2.0
agent 环境安全事件响应：分类→控制蔓延→取证留痕→恢复→复盘的分步处置流程，覆盖密钥泄露、提示注入触发、依赖投毒、未授权操作四类事件，每条处置附命令证据。DSH/agent 环境出现疑似安全事件需要按流程处置与复盘时用；日常开发与例行维护不用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 事件响应（incident-response） 原则：**先控制，再取证，后恢复**。控制动作（轮换/撤销/停用）不依赖完整归因——疑似即执行；取证在控制之后做，避免"边查边扩散"。全程不写密钥明文，报告遵守 `secret-scan` 脱敏规范。 ## 1. 确认与分类 先回答两个问题：发生了什么（类型），影响面多大（范围）。四类事件与初步证据： | 事件类型 | 初步证据 | 立即动作（见第 2 节） | |---|---|---| | 密钥泄露 | 扫描告警、公开仓库出现 token | 轮换 + 撤销 | | 提示注入触发 | 会话执行了上下文外指令（下载/外发/改配置） | 停用触发源 + 隔离 | | 依赖投毒 | 新依赖出现异常 install 脚本/网络请求 | 回滚依赖 + 锁文件冻结 | | 未授权操作 | 仓库/CI 出现非本人提交、非预期运行 | 撤销凭据 + 暂停自动化 | ```sh git rev-parse HEAD git log -1 --format='%H %cd' --date=iso-strict ``` 预期输出样例：`a1b2c3d4...` 与提交时间。 判据：先记录当前 HEAD——后续所有证据命令都相对它复核；不确定类型时先按"密钥泄露"假设处置（轮换成本最低、最安全）。 ## 2. 控制蔓延（疑似即执行，不等归因） - 密钥类：按 `secret-scan` 第 6 节顺序——先轮换、再撤销；轮换完成判据 = 新值生效且旧值在厂商控制台已撤销。 - 注入/未授权操作类：停用触发源——下线相关 MCP/插件、暂停 agent 会话与相关 CI： ```sh git ls-files -- 'cordis.yml' '**/cordis.yml' '.mcp.json' '.github/workflows/**' dsh --profile <配置文件> --dump-config ``` 样例输出：配置与工作流路径列表；dump 输出中能看到已挂载插件清单。 判据：dump 输出里逐个核对插件/MCP 是否受信；存疑的立即从配置移除（改配置 → 新会话生效）。控制完成判据 = 事件源已停用且 24 小时内无同类新动作。 ## 3. 取证留痕（时间线 + 证据包） ```sh git log --format='%H %cd %s' --date=iso-strict --since='<事发时间>' --all # Windows：Get-ChildItem $env:DSH_HOME -Recurse -File | Sort-Object LastWriteTime -Descending | Select-Object -First 20 …
Read the whole file at its exact version.
How to install
mdr add perrylink/dsh-skill-pack-security/incident-response@sha256:fa705afd615105f4The line at the top of this page pins the label v2.2.25, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_fwvmrme65t4s2mxs)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 13 versions of this file, between Sep 7, 2026 and Oct 31, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2.2.25 latest | 2026-10-31 | af6b35f | 4,860 B | A | view · diff |
| v2.2.24 | 2026-10-10 | 0c1deb8 | 4,860 B | A | view · diff |
| v2.2.23 | 2026-10-10 | a5f8d45 | 4,860 B | A | view · diff |
| v2.2.22 | 2026-10-05 | 008bf2e | 4,860 B | A | view · diff |
| v2.2.20 | 2026-10-05 | 6b2adfe | 4,860 B | A | view · diff |
| v2.2.19 | 2026-10-04 | 380880e | 4,860 B | A | view · diff |
| v2.2.18 | 2026-10-04 | 8761f0d | 4,860 B | A | view · diff |
| v2.2.17 | 2026-09-24 | f926448 | 4,860 B | A | view · diff |
| v2.2.16 | 2026-09-12 | 8e74c4d | 4,860 B | A | view · diff |
| v2.2.14 | 2026-09-10 | d6120c8 | 4,860 B | A | view · diff |
| v2.2.13 | 2026-09-09 | 6ffdda7 | 4,860 B | A | view · diff |
| v2.2.12 | 2026-09-09 | dd3da11 | 4,860 B | A | view · diff |
| v2.2.10 | 2026-09-07 | 4430c52 | 4,860 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4860 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
perrylink/dsh-skill-pack-security · 22 stars · license Apache-2.0 · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_fwvmrme65t4s2mxs GET https://markdownregistry.com/api/v1/resolve?ref=perrylink/dsh-skill-pack-security/incident-response GET https://markdownregistry.com/api/v1/blob/fa705afd615105f4844172586e1b55bfb9c2989dc031118e6bead5b50f5da9c6
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from perrylink/dsh-skill-pack-security
Every file in perrylink/dsh-skill-pack-security