菜单
Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/Zate/cc-plugins --skill remediation-library命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Create or update the project security baseline, profile, suppressions file, and gitignore entries for security scans
Fix or guide remediation for a specific security finding from the latest scan report
Run a security assessment using deterministic static analysis tools with LLM-powered triage
正在显示 SKILL.md
基于 SOC 职业分类
| name | remediation-library |
| description | Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities. |
This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance.
remediation-injectionCovers: SQL Injection, Command Injection, XSS CWEs: CWE-89, CWE-78, CWE-79 Use when: Fixing injection vulnerabilities, code review feedback
remediation-cryptoCovers: Weak Cryptography, Insecure Randomness, TLS Issues CWEs: CWE-327, CWE-330, CWE-295 Use when: Fixing crypto vulnerabilities, upgrading algorithms
remediation-authCovers: Hardcoded Credentials, JWT Security, Deserialization, Access Control CWEs: CWE-798, CWE-347, CWE-502, CWE-862 Use when: Fixing auth issues, secrets management, authorization
remediation-configCovers: Path Traversal, Debug Mode, Security Headers CWEs: CWE-22, CWE-489, CWE-693 Use when: Fixing deployment issues, hardening configuration
| Vulnerability Type | Skill to Use |
|---|---|
| SQL Injection | remediation-injection |
| Command Injection | remediation-injection |
| XSS | remediation-injection |
| Weak hashing (MD5/SHA1) | remediation-crypto |
| Insecure randomness | remediation-crypto |
| TLS disabled | remediation-crypto |
| Hardcoded secrets | remediation-auth |
| JWT issues | remediation-auth |
| Unsafe deserialization | remediation-auth |
| Missing access control | remediation-auth |
| Path traversal | remediation-config |
| Debug in production | remediation-config |
| Missing headers | remediation-config |
| OWASP 2021 | Primary Skill |
|---|---|
| A01 Broken Access Control | remediation-auth |
| A02 Cryptographic Failures | remediation-crypto |
| A03 Injection | remediation-injection |
| A04 Insecure Design | Multiple |
| A05 Security Misconfiguration | remediation-config |
| A06 Vulnerable Components | N/A |
| A07 Auth Failures | remediation-auth |
| A08 Data Integrity Failures | remediation-auth |
| A09 Logging Failures | remediation-config |
| A10 SSRF | remediation-injection |
vulnerability-patterns - Detection patternsasvs-requirements - ASVS compliance mappingaudit-report - Report formatting