security-audit SKILL.md skillA

security-audit from chainlesschain/chainlesschain is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add chainlesschain/chainlesschain/security-audit@v1.0.0

Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
chainlesschain/chainlesschain
Path
desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/security-audit/SKILL.md
Versions recorded
3
Latest version
v1.0.0, committed Aug 28, 2026
First version recorded
Jun 3, 2026
Size
1,817 bytes
Repository stars
11
License
a license file GitHub does not identify

代码安全审计技能 - 执行OWASP Top 10扫描、密钥检测、依赖审计.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# 安全审计技能

## 描述

执行全面的代码安全审计,包括OWASP Top 10漏洞扫描、硬编码密钥检测、npm依赖审计。

## 使用方法

```
/security-audit [目标路径]
```

## 执行步骤

1. **扫描硬编码密钥**: 检查源代码中的API密钥、密码、Token等敏感信息
2. **OWASP Top 10检查**: 检查SQL注入、XSS、CSRF等常见漏洞
3. **依赖审计**: 运行npm audit检查已知漏洞的依赖
4. **输出报告**: 生成安全审计报告,包含发现的问题和修复建议

## 输出格式

- 风险等级: Critical / High / Medium / Low
- 发现详情: 文件路径、行号、问题描述
- 修复建议: 具体的修复方案

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add chainlesschain/chainlesschain/security-audit@sha256:b92ef601fae900cf

The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ga6hqxevgae7mzsm.svg)](https://markdownregistry.com/a/art_ga6hqxevgae7mzsm)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Jun 3, 2026 and Aug 28, 2026, about one every 43 days.

versioncommittedcommitsizeaudit
v1.0.0 latest2026-08-28 44248c7 1,817 BA view · diff
v1.0.02026-08-28 c29953e 1,800 BA view · diff
v1.0.02026-06-03 3b0b2dc 1,692 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1817 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

chainlesschain/chainlesschain · 11 stars · license a license file GitHub does not identify · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ga6hqxevgae7mzsm
GET https://markdownregistry.com/api/v1/resolve?ref=chainlesschain/chainlesschain/security-audit
GET https://markdownregistry.com/api/v1/blob/b92ef601fae900cfcb496d1af49285f42f3283f924fe6f119c2efd6850a9726b

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from chainlesschain/chainlesschain

cc-cli SKILL.md skill
chainlesschain/chainlesschain · .claude/skills/cc-cli/SKILL.md · Invoke ChainlessChain `cc` CLI commands from natural language. Triggers when the user wants to run any `cc …` action…
git:20260618.4898c75 · audit A · 11 stars
pdh-android-collect SKILL.md skill
chainlesschain/chainlesschain · .claude/skills/pdh-android-collect/SKILL.md · Collect a rooted Android device's real personal data into the Personal Data Hub (PDH) vault to feed the user's…
git:20260618.58d3bd9 · audit A · 11 stars
AGENTS.md AGENTS.md file
chainlesschain/chainlesschain · AGENTS.md
git:20261023.f06ee98 · audit A · 11 stars
CLAUDE.md CLAUDE.md file
chainlesschain/chainlesschain · CLAUDE.md
git:20260920.96ab90a · audit A · 11 stars
ab-compare SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/ab-compare/SKILL.md · Generate and compare multiple implementation variants with benchmarking and scoring
v1.0.0 · audit A · 11 stars
agent-browser SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/agent-browser/SKILL.md · Advanced browser automation for AI agents with snapshot-ref interaction pattern - navigate, snapshot interactive…
v1.0.0 · audit A · 11 stars
api-design SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/api-design/SKILL.md · Design RESTful APIs with best practices, conventions, and OpenAPI specs
v1.0.0 · audit A · 11 stars
api-docs-generator SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/api-docs-generator/SKILL.md · Generate API documentation from code - produce OpenAPI/Swagger specs, Markdown API references, request/response…
v1.0.0 · audit A · 11 stars
api-gateway SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/api-gateway/SKILL.md · Universal API gateway - connect to 100+ APIs with a unified interface, manage API keys, and chain API calls
v1.2.0 · audit A · 11 stars
api-tester SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/api-tester/SKILL.md · API测试技能 - IPC处理器发现、测试生成、健康检查、回归测试
v1.0.0 · audit A · 11 stars
architect-mode SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/architect-mode/SKILL.md · 双阶段架构模式 - 先规划后编辑,分离推理与代码修改,提升多文件编辑准确率
v1.0.0 · audit A · 11 stars
audio-transcriber SKILL.md skill
chainlesschain/chainlesschain · desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/audio-transcriber/SKILL.md · Speech-to-text transcription using Whisper API or local engine
v1.0.0 · audit A · 11 stars

Every file in chainlesschain/chainlesschain

Other files named security-audit

security-audit SKILL.md skill
davepoon/buildwithclaude · plugins/agent-triforce/skills/security-audit/SKILL.md · Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities…
git:20260307.756e327 · audit A · 3,724 stars
security-audit SKILL.md skill
maxmiksa/auto-company · .claude/skills/security-audit/SKILL.md · Use when reviewing code security, auditing dependencies for CVEs, checking configuration or secret security, assessing…
git:20250919.3118c12 · audit A · 3,191 stars
security-audit SKILL.md skill
borghei/claude-skills · engineering/security-audit/SKILL.md · Multi-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records…
v1.0.0 · audit A · 1,075 stars
security-audit SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/security-audit/SKILL.md · Run a comprehensive language-agnostic security & CVE audit, scored 0-100
git:20260501.09a3f3d · audit A · 1,027 stars
security-audit SKILL.md skill
laolaoshiren/claude-code-skills-zh · skills/security-audit/SKILL.md · 代码安全审计 - 漏洞扫描、依赖检查、安全最佳实践
git:20260421.27394be · audit A · 869 stars
security-audit SKILL.md skill
decebals/claude-code-java · skills/security-audit/SKILL.md · Java security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with…
git:20260828.702770a · audit B · 768 stars
security-audit SKILL.md skill
cowork-os/cowork-os · resources/skills/security-audit/SKILL.md · Answer security questions about code, review a file or change for vulnerabilities, or run a full multi-agent audit of a…
v2.0.0 · audit A · 535 stars
security-audit SKILL.md skill
josstei/maestro-orchestrate · plugins/maestro/skills/security-audit/SKILL.md · Run a Maestro-style security assessment for authentication, authorization, data exposure, secret handling, and…
git:20260410.f5a5165 · audit A · 486 stars

Browse by kind, by grade A, or by owner.