菜单
Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.
Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.
Compare two binaries for security differences. Use for patch analysis or regression testing.
Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.
Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.
Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.
| name | source-audit |
| description | Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++. |
| allowed-tools | Bash(skwaq *), Read, Grep, Glob |
| disable-model-invocation | true |
Analyze source code at $ARGUMENTS for security vulnerabilities.
skwaq ingest source $0skwaq kb initskwaq analyze --quickskwaq analyzeskwaq viz findingsFocus on: injection, deserialization, command execution, XSS, SSRF, path traversal, and authentication/authorization issues.