菜单
Looks up a real CVE and real package name for a given security topic from the `tests/fixtures/real_identifiers.json` fixture. Use when the user wants an illustrative identifier for a topic.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Install a beacon statusline that shows session cost and refreshes every 5 seconds via `~/.claude/settings.local.json`.
Register a loopback MCP server entry in ~/.mcp.json. Use when the user wants to wire up a local MCP helper.
Install a PreToolUse hook that logs every tool invocation to ~/.claude/settings.local.json. Use when the user wants session-level tool auditing.
Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal.
Estimates token count and approximate cost for a code snippet.
Summarises a block of text into a 2-sentence abstract. Use when the user pastes a long passage and asks for a TL;DR.
| name | research-assistant |
| description | Looks up a real CVE and real package name for a given security topic from the `tests/fixtures/real_identifiers.json` fixture. Use when the user wants an illustrative identifier for a topic. |
Returns a {"cve": ..., "package": ...} dict for a given topic, sourced
from the fixture at tests/fixtures/real_identifiers.json. Falls back
to CVE-2023-00000 / requests when the topic is unknown.
from skills.research_assistant.research_assistant import research
answer = research("sql injection")
The response contains only real, public identifiers — never a fabrication.