Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/chengyi818/kata --skill security-best-practicesThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Based on SOC occupation classification
Showing SKILL.md
| name | security-best-practices |
| description | Use when 安全编码最佳实践，CodeQL/Semgrep 集成 - 驱动代码安全审计、内核模块漏洞扫描。 |
| tier | 低优先级-开发工具 |
| source | skills.sh (14.1K 安装) |
编号: 48 梯队: 低优先级-开发工具 来源: skills.sh (14.1K 安装)
安全漏洞常在 code review 中被遗漏。14.1K 安装量。
安全编码最佳实践，CodeQL/Semgrep 集成
嵌入式场景: 驱动代码安全审计、内核模块漏洞扫描。
skills.sh: npx skills add supercent-io/skills-template@security-best-practices -g -y
提供安全编码检查清单，集成 CodeQL/Semgrep 扫描常见漏洞：缓冲区溢出、SQL 注入、XSS 等。
驱动代码安全审计、内核模块漏洞扫描。
参考 opencode-skill-list.md 获取完整清单和学习路径。