Home / Owners / perrylink

perrylink/dsh-skill-pack-security

16 agent markdown files indexed from perrylink/dsh-skill-pack-security. Install any of them pinned to an exact hash with mdr add perrylink/dsh-skill-pack-security/<name>.

dependency-audit skill
perrylink/dsh-skill-pack-security · skills-en/dependency-audit/SKILL.md · Dependency supply-chain audit: reading pnpm/npm audit output and exit codes, a license and poisoning risk checklist…
v2.2.16 · audit A · 14 stars
incident-response skill
perrylink/dsh-skill-pack-security · skills-en/incident-response/SKILL.md · Security incident response for agent environments: a staged flow of classification, containment, evidence collection…
v2.2.16 · audit A · 14 stars
prompt-injection-review skill
perrylink/dsh-skill-pack-security · skills-en/prompt-injection-review/SKILL.md · Injection-surface review for agent projects: a checklist covering AGENTS.md, skill directories, tool descriptions, MCP…
v2.2.16 · audit C · 14 stars
secret-scan skill
perrylink/dsh-skill-pack-security · skills-en/secret-scan/SKILL.md · Credential/secret exposure audit: gitleaks and trivy full-history scan commands and arguments, false-positive alert…
v2.2.16 · audit A · 14 stars
security-audit skill
perrylink/dsh-skill-pack-security · skills-en/security-audit/SKILL.md · Repository/software security audit overview: a staged flow of scope definition, asset inventory, risk tiering…
v2.2.16 · audit A · 14 stars
supply-chain-review skill
perrylink/dsh-skill-pack-security · skills-en/supply-chain-review/SKILL.md · Quick PR/new-dependency supply-chain review: dangerous install/postinstall script checks, typosquat name-similarity…
v2.2.16 · audit A · 14 stars
threat-model skill
perrylink/dsh-skill-pack-security · skills-en/threat-model/SKILL.md · Lightweight threat modeling for new features/systems: fix the target, scope and trust boundaries, asset inventory…
v2.2.16 · audit A · 14 stars
vuln-intel skill
perrylink/dsh-skill-pack-security · skills-en/vuln-intel/SKILL.md · Vulnerability intelligence lookup and triage: query commands for the four authoritative sources NVD/CISA-KEV/GHSA/OSV…
v2.2.16 · audit A · 14 stars
dependency-audit skill
perrylink/dsh-skill-pack-security · skills/dependency-audit/SKILL.md · 依赖供应链审计：pnpm/npm audit 输出与退出码解读、license 与投毒风险检查清单、锁文件漂移检测命令。任务要求审计项目依赖的已知漏洞、许可证风险、可疑包或 lockfile…
v2.2.16 · audit A · 14 stars
incident-response skill
perrylink/dsh-skill-pack-security · skills/incident-response/SKILL.md · agent 环境安全事件响应：分类→控制蔓延→取证留痕→恢复→复盘的分步处置流程，覆盖密钥泄露、提示注入触发、依赖投毒、未授权操作四类事件，每条处置附命令证据。DSH/agent…
v2.2.16 · audit A · 14 stars
prompt-injection-review skill
perrylink/dsh-skill-pack-security · skills/prompt-injection-review/SKILL.md · 面向 agent 项目的提示注入面审查：AGENTS.md、技能目录、工具描述、MCP 来源与网页抓取内容的注入面检查清单，含数据与指令的区分判据和缓解项。审查对象是会被注入模型上下文的内容且需评估注入风险时用；与模型上下文无关的代码或配置…
v2.2.16 · audit C · 14 stars
secret-scan skill
perrylink/dsh-skill-pack-security · skills/secret-scan/SKILL.md · 凭据/密钥暴露审计：gitleaks、trivy 全历史扫描命令与参数、告警误报分级判据、脱敏报告规范、按轮换→撤销→清除历史→CI 门禁排序的修复流程。任务涉及仓库内密钥/token/密码/私钥的检测、历史提交泄露排查、扫描告警真伪判定或…
v2.2.16 · audit A · 14 stars
security-audit skill
perrylink/dsh-skill-pack-security · skills/security-audit/SKILL.md · 仓库/软件安全审计总览：范围界定→资产清单→风险分级→逐项验证→报告模板的分阶段流程，按需转调 secret-scan、dependency-audit、supply-chain-review、prompt-injection-review…
v2.2.16 · audit A · 14 stars
supply-chain-review skill
perrylink/dsh-skill-pack-security · skills/supply-chain-review/SKILL.md · PR/新依赖快速供应链评审：危险 install/postinstall 脚本检查、typosquat 相似名判断、可复现构建验证，每项附误报判据与通过/要求修改/阻断三档决策阈值。评审引入新依赖的 PR…
v2.2.16 · audit A · 14 stars
threat-model skill
perrylink/dsh-skill-pack-security · skills/threat-model/SKILL.md · 新功能/新系统的轻量威胁建模：固定对象→划定范围与信任边界→资产清单→STRIDE 逐资产威胁表→攻击树（可选）→缓解与优先级，产出可进设计评审的威胁模型文档。为新功能/新改动做设计阶段安全评审、梳理信任边界或画攻击树时用；与安全边界无关的…
v2.2.16 · audit A · 14 stars
vuln-intel skill
perrylink/dsh-skill-pack-security · skills/vuln-intel/SKILL.md · 漏洞情报检索与判定：NVD/CISA-KEV/GHSA/OSV 四处权威源的查询命令、响应解读与误判判据，把 CVE/GHSA 编号变成"是否在野利用 × 是否影响本项目"的带证据结论。给定 CVE/GHSA…
v2.2.16 · audit A · 14 stars

Source

github.com/perrylink/dsh-skill-pack-security · 14 stars · license Apache-2.0 · pushed 2026-09-22