Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

code-security

Étoiles12

Forks3

Mis à jour26 février 2026 à 12:53

Classifies code vulnerabilities by OWASP Top 10 and CWE identifiers

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

ApiliumCode

ApiliumCode/mayros

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

Explorateur de fichiers

10 fichiers

SKILL.md

readonly

name	code-security
description	Classifies code vulnerabilities by OWASP Top 10 and CWE identifiers
type	semantic
user-invocable	true
semantic	{"skillVersion":1,"permissions":{"graph":["read","write"],"proofs":["request"],"memory":["recall"]},"assertions":[{"predicate":"security:vulnerability","requireProof":true},{"predicate":"security:finding","requireProof":false}],"queries":[{"predicate":"security:history","scope":"agent"}]}

code-security

Classifies code vulnerabilities by OWASP Top 10 categories and CWE identifiers, providing severity ratings for each finding.

When to Use

Use this skill when:

Reviewing code snippets stored in the knowledge graph for security vulnerabilities
Performing automated security audits on code content
Classifying findings by CWE identifier and severity level before human review

Vulnerability Coverage

The skill detects 12 vulnerability classes:

CWE	Category	Severity
CWE-89	SQL Injection	critical
CWE-79	Cross-Site Scripting (XSS)	high
CWE-78	Command Injection	critical
CWE-22	Path Traversal	high
CWE-502	Insecure Deserialization	high
CWE-798	Hardcoded Secrets	critical
CWE-95	Code Injection	critical
CWE-918	Server-Side Request Forgery (SSRF)	high
CWE-327	Weak Cryptography	medium
CWE-601	Open Redirect	medium
CWE-209	Information Exposure	low
CWE-306	Missing Authentication	medium

Instructions

Store code content in the graph using skill_assert or other write tools
Query with predicate security:finding to trigger the code-security runtime
The skill enriches each result with a findings array containing CWE IDs and severity levels
Use security:vulnerability (with proof) to record confirmed vulnerabilities
Query security:history to review past audit results for the current agent

Plus depuis ce dépôt

même dépôt

akashi

ApiliumCode/mayros

Connect the user's Akashi second brain (local, private, verifiable) over MCP and answer from cited vault passages with signed provenance. Query it BEFORE answering anything about the user's knowledge, projects, decisions, or conventions. Triggers - akashi, vault, my notes, second brain, remember this, what did I decide.

2026-07-1412

model-usage

ApiliumCode/mayros

Use CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trigger when asked for model-level usage/cost data from codexbar, or when you need a scriptable per-model summary from codexbar cost JSON.

2026-03-0212

skill-creator

ApiliumCode/mayros

Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.

2026-03-0212

api-monitor

ApiliumCode/mayros

Monitor API health and assert endpoint status with ZK proofs

2026-02-2612

code-review

ApiliumCode/mayros

Semantic code review with provable assertions about code quality

2026-02-2612

dependency-audit

ApiliumCode/mayros

Audit project dependencies with verifiable security assertions

2026-02-2612

name	code-security
description	Classifies code vulnerabilities by OWASP Top 10 and CWE identifiers
type	semantic
user-invocable	true
semantic	{"skillVersion":1,"permissions":{"graph":["read","write"],"proofs":["request"],"memory":["recall"]},"assertions":[{"predicate":"security:vulnerability","requireProof":true},{"predicate":"security:finding","requireProof":false}],"queries":[{"predicate":"security:history","scope":"agent"}]}

code-security

Classifies code vulnerabilities by OWASP Top 10 categories and CWE identifiers, providing severity ratings for each finding.

When to Use

Use this skill when:

Reviewing code snippets stored in the knowledge graph for security vulnerabilities
Performing automated security audits on code content
Classifying findings by CWE identifier and severity level before human review

Vulnerability Coverage

The skill detects 12 vulnerability classes:

CWE	Category	Severity
CWE-89	SQL Injection	critical
CWE-79	Cross-Site Scripting (XSS)	high
CWE-78	Command Injection	critical
CWE-22	Path Traversal	high
CWE-502	Insecure Deserialization	high
CWE-798	Hardcoded Secrets	critical
CWE-95	Code Injection	critical
CWE-918	Server-Side Request Forgery (SSRF)	high
CWE-327	Weak Cryptography	medium
CWE-601	Open Redirect	medium
CWE-209	Information Exposure	low
CWE-306	Missing Authentication	medium

Instructions

Store code content in the graph using skill_assert or other write tools
Query with predicate security:finding to trigger the code-security runtime
The skill enriches each result with a findings array containing CWE IDs and severity levels
Use security:vulnerability (with proof) to record confirmed vulnerabilities
Query security:history to review past audit results for the current agent