Claude Marketplaces
SkillsMCP serversMarketplacesDigestTools
Submit

This week in Claude

Every Monday: Claude Code, Agent SDK, MCP, and the Anthropic platform moves worth your time.

Skills by category
Frontend DevelopmentBackend & APIsTesting & QASecurityDevOps & CI/CDGit & Pull RequestsDocumentationCode Review & QualityAI & Agent BuildingSkill Development
MCP servers by category
Sales & MarketingWeb & Browser AutomationDatabasesAI & LLM ToolsCloud & InfrastructureCommunication & MessagingDeveloper ToolsDesign & CreativeDocuments & KnowledgeSearch & Web Crawling
Marketplaces by category
AI Agents & OrchestrationLLM IntegrationDevelopment ToolsFrontend & UIBackend & APIsDatabasesTesting & Code QualityDevOps & CloudSecurity & ComplianceGit & Version Control
Claude Marketplaces

An independent directory of skills, plugins and MCP servers for Claude Code. Not affiliated with Anthropic.

Browse

  • Skills
  • MCP servers
  • Marketplaces
  • Weekly digest
  • Skill index
  • MCP index
  • Marketplace index

Site

  • About
  • Tools
  • Submit
  • Feedback
  • Privacy
  • llms.txt
  • Plugins reference

Maker

  • Snug
  • Agent Caffeine
  • knobs
  • Wax
  • Vectoys
  • mertduzgun.com
Crafted at
Skills/Testing & QA
telagod avatar

Securing Systems

telagod/code-abyss

This is a router skill that triages security engineering work across penetration testing, code auditing, red/blue/purple team ops, threat intelligence, and vulnerability research. It covers the fundamentals but routes specialized work to dedicated skills: defending-applications for app-layer security, securing-cloud-and-supply-chain for infrastructure hardening, detecting-and-responding for detection engineering, and architecting-security for threat modeling and compliance. The skill enforces output constraints like using RFC 5737 addresses, redacting credentials, and requiring authorization confirmation before infrastructure changes. It pairs every attack technique with detection and mitigation advice, which is the right default stance. Use this when you need general offensive security guidance or aren't sure which specialized security skill applies.

GitHub stars
224
last updated
Jun 10, 2026
View on GitHubSave

Install

$ npx -y skills add telagod/code-abyss --skill securing-systems --agent claude-code

Installs into .claude/skills of the current project.

Files

攻防秘典

判断先于执行:决定「是否做 / 选什么 / 如何取舍」(栈、方案、架构、权衡)前,先读领域判断内核 skills/_kernel/security/SKILL.md——它管 judgment,本秘典管 execution;冲突时以内核判断为准。

安全工程总路由:通用攻防视角与红队 / 蓝队 / 紫队实战知识。 专域工作(应用安全防御、云原生加固、检测工程、安全架构)走专门 skill。 信级:项目文件 > 标准库 > 训练记忆(标 [unverified])

路由

攻防基础(本 skill 内)

意图秘典核心
渗透测试pentestWeb/API/内网、OWASP、BOLA、JWT、GraphQL
代码审计code-audit危险函数、污点追踪、Source→Sink
红队攻击red-teamPoC、C2、横移、免杀、供应链
蓝队防御blue-team检测、SOC、IR、取证、密钥轮换
威胁情报threat-intelOSINT、威胁狩猎、ATT&CK 建模
漏洞研究vuln-research逆向、Exploit、Fuzzing、PWN
执行模式 / CTF 沙箱authorization-tiersT1/T2/T3、CTF 目标默认沙箱

专域路由(其他 skill)

意图走 skill适用
应用层防御(XSS / SQLi / OAuth / LLM AppSec)defending-applications写代码 / 修 CVE / 鉴权设计
云原生 + 供应链加固securing-cloud-and-supply-chainK8s / CI/CD / SLSA / 云 IAM
检测工程 + 蓝紫队detecting-and-respondingSigma / EDR / IR / 威胁狩猎
安全架构 + 合规 + 身份architecting-security威胁建模 / 零信任 / SOC2/PCI

执行链

攻:侦察 → 武器化 → 投递 → 利用 → 安装 → C2 → 行动
守:预防 → 检测 → 响应 → 恢复
紫队:ATT&CK → 红攻 → 蓝检 → 缺口 → 闭环

输出约束

  • 安全测试代码输出须标注使用场景(Security Testing / Defense Validation / Security Research)
  • 涉及真实 IP / 域名时使用 RFC 5737 保留地址(192.0.2.0/24、198.51.100.0/24)或 example.com
  • 凭证、密钥、Token 一律使用占位符(<REDACTED>、<TARGET-TOKEN>)
  • 每个攻击技术附带检测 / 缓解建议,攻防一体呈现

优先级

场景排序
攻击模拟效果 > 精准 > 控制
防御响应正确 > 覆盖 > 速度
紧急事件速度 > 正确 > 简洁
SKILL.md on GitHub

Sponsors

SnugThe clipboard manager you and your agent can use, safelyAgent CaffeineClose your lid, come back to finished workWaxBlock anything with supervision, without erasing your iPhoneOpen StepsSponsoredFree and open-source skills that make AI coding agents easier to understand, verify, and control.

Details

Repository
github.com/telagod/code-abyss
Categories
Testing & QA, Security, Code Review & Quality, Data Science & ML, Cloud & Infrastructure
License
MIT
First seen
Jun 11, 2026

More from telagod/code-abyss

All 30
  • Shipping Changes
  • Verifying Modules
  • Analyzing Changes
  • Analyzing Security
  • Analyzing Spreadsheets
  • Applying Ui Design System
  • Architecting Security
  • Automating Devops
  • Building Agent Systems
  • Checking Code Quality
  • Creating Presentations
  • Cultivating Personas
  • Cultivating Skills
  • Defending Applications
  • Designing Architectures
  • Designing Hardware Products
  • Detecting And Responding
  • Developing Mobile Apps
  • Developing Software
  • Engineering Data Pipelines
  • Generating Docs
  • Indexing Code
  • Operating Kicad Eda
  • Orchestrating Adversarial Reviews

Recommended

More Testing & QA
1Trevoke avatarwriting-skillsTrevoke/org-gtd.elThis is TDD for documentation.0installs
2tursodatabase avatarmvcctursodatabase/tursoOverview of Experimental MVCC feature - snapshot isolation, versioning, limitations0installs
3UKGovernmentBEIS avatarcode-quality-fix-allUKGovernmentBEIS/inspect_evalsFix code quality issues identified in a code quality review stored in agent_artefacts/code_quality/<topic>/. Systematically addresses issues found by the code-q0installs
4ybuild-ai avatarai-game-art-pipelineybuild-ai/ai-game-art-pipeline-skillProvider-neutral open-source skill for planning and producing game-runtime art assets and animation: static props/icons, canonical character sheets, combat spri0installs
5zhixiangluo avatardiscover-ui-surfacezhixiangluo/10xproductivityWalk through a UI flow once manually and capture a durable interaction map — which DOM elements to click, which network requests they trigger, and what field sh0installs
6fugazi avatarplaywright-e2e-testingfugazi/test-automation-skills-agentsAuthor and maintain versioned Playwright (@playwright/test) TypeScript UI specs for browser user flows. Use when asked to create, run, debug, or refactor E2E te616installs