security-audit

chinlung/claude-dev-workflow

安全稽核 skill - 將 agent 化為安全稽核員：預設只提供 guidance，明確要求稽核時才跑六階段流程（reconnaissance → coverage-led hunting → candidate validation → structured output → independent record verification → target-neutral report），找出跨越真實信任邊界、有原始碼證據的漏洞，而非偏離 checklist 的理論性問題。Vendored 自 cloudflare/security-audit-skill（MIT）。與 code-audit-rigor 互補：本 plugin 主動獵捕 exploit，code-audit-rigor 以量化決策框架治理 PR/branch review。

version

2.0.0

GitHub stars

1

Sponsors

SnugThe clipboard manager you and your agent can use, safelyAgent CaffeineClose your lid, come back to finished workWaxBlock anything with supervision, without erasing your iPhoneOpen StepsSponsoredFree and open-source skills that make AI coding agents easier to understand, verify, and control.