
This is a router skill that triages security engineering work across penetration testing, code auditing, red/blue/purple team ops, threat intelligence, and vulnerability research. It covers the fundamentals but routes specialized work to dedicated skills: defending-applications for app-layer security, securing-cloud-and-supply-chain for infrastructure hardening, detecting-and-responding for detection engineering, and architecting-security for threat modeling and compliance. The skill enforces output constraints like using RFC 5737 addresses, redacting credentials, and requiring authorization confirmation before infrastructure changes. It pairs every attack technique with detection and mitigation advice, which is the right default stance. Use this when you need general offensive security guidance or aren't sure which specialized security skill applies.
$ npx -y skills add telagod/code-abyss --skill securing-systems --agent claude-codeInstalls into .claude/skills of the current project.
判断先于执行:决定「是否做 / 选什么 / 如何取舍」(栈、方案、架构、权衡)前,先读领域判断内核
skills/_kernel/security/SKILL.md——它管 judgment,本秘典管 execution;冲突时以内核判断为准。
安全工程总路由:通用攻防视角与红队 / 蓝队 / 紫队实战知识。 专域工作(应用安全防御、云原生加固、检测工程、安全架构)走专门 skill。 信级:项目文件 > 标准库 > 训练记忆(标
[unverified])
| 意图 | 秘典 | 核心 |
|---|---|---|
| 渗透测试 | pentest | Web/API/内网、OWASP、BOLA、JWT、GraphQL |
| 代码审计 | code-audit | 危险函数、污点追踪、Source→Sink |
| 红队攻击 | red-team | PoC、C2、横移、免杀、供应链 |
| 蓝队防御 | blue-team | 检测、SOC、IR、取证、密钥轮换 |
| 威胁情报 | threat-intel | OSINT、威胁狩猎、ATT&CK 建模 |
| 漏洞研究 | vuln-research | 逆向、Exploit、Fuzzing、PWN |
| 执行模式 / CTF 沙箱 | authorization-tiers | T1/T2/T3、CTF 目标默认沙箱 |
| 意图 | 走 skill | 适用 |
|---|---|---|
| 应用层防御(XSS / SQLi / OAuth / LLM AppSec) | defending-applications | 写代码 / 修 CVE / 鉴权设计 |
| 云原生 + 供应链加固 | securing-cloud-and-supply-chain | K8s / CI/CD / SLSA / 云 IAM |
| 检测工程 + 蓝紫队 | detecting-and-responding | Sigma / EDR / IR / 威胁狩猎 |
| 安全架构 + 合规 + 身份 | architecting-security | 威胁建模 / 零信任 / SOC2/PCI |
攻:侦察 → 武器化 → 投递 → 利用 → 安装 → C2 → 行动
守:预防 → 检测 → 响应 → 恢复
紫队:ATT&CK → 红攻 → 蓝检 → 缺口 → 闭环
192.0.2.0/24、198.51.100.0/24)或 example.com<REDACTED>、<TARGET-TOKEN>)| 场景 | 排序 |
|---|---|
| 攻击模拟 | 效果 > 精准 > 控制 |
| 防御响应 | 正确 > 覆盖 > 速度 |
| 紧急事件 | 速度 > 正确 > 简洁 |
Sponsors