一键在 Manus 中运行任何 Skill

source-audit

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

在 Manus 中运行

概览

Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.

安装命令

npx skills add https://github.com/rysweet/skwaq --skill source-audit

复制此命令并粘贴到 Claude Code 中以安装该技能

来源

rysweet/skwaq

星标5

分支3

更新时间2026年3月11日 01:26

SKILL.md

readonly

name	source-audit
description	Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.
allowed-tools	Bash(skwaq *), Read, Grep, Glob
disable-model-invocation	true

Source Code Security Audit

Analyze source code at $ARGUMENTS for security vulnerabilities.

Steps

Ingest the source: skwaq ingest source $0
Initialize knowledge base: skwaq kb init
Run pattern analysis: skwaq analyze --quick
Run AI analysis with full agent pipeline: skwaq analyze
Review findings: skwaq viz findings
For each critical finding, explain the vulnerability and how to fix it

Focus on: injection, deserialization, command execution, XSS, SSRF, path traversal, and authentication/authorization issues.

同仓库更多 Skills

同仓库

llm-binary-vuln-guide

rysweet/skwaq

Reference guide for LLM-based vulnerability detection in binary code. Provides best practices, techniques, and prompting strategies for using LLMs to find vulnerabilities in stripped binaries, firmware, and decompiled code. Use when analyzing binaries with AI, writing vulnerability analysis prompts, or optimizing detection pipelines.

2026-03-165

binary-audit

rysweet/skwaq

Comprehensive binary security assessment including hardening, attack surface, and vulnerability analysis. Use when analyzing an ELF or PE binary.

2026-03-115

compare-binaries

rysweet/skwaq

Compare two binaries for security differences. Use for patch analysis or regression testing.

2026-03-115

cwe-lookup

rysweet/skwaq

Look up CWE entries and explain their relevance. Use when discussing vulnerability types or CWE classifications.

2026-03-115

explain-vuln

rysweet/skwaq

Explain a specific vulnerability finding in detail with remediation guidance. Use when the user wants to understand a finding or how to fix it.

2026-03-115

threat-model

rysweet/skwaq

Generate a threat model for the analyzed target. Use after ingesting a binary or source code to understand the threat landscape.

2026-03-115

来源

rysweet

rysweet/skwaq

打开 GitHub 仓库查看创作者相关仓库

安装命令

下载

在 Manus 中运行

适用职业SOC

信息安全分析师计算机与数学类职业15-1212L4

name	source-audit
description	Multi-language source code security audit. Use when analyzing source code for vulnerabilities. Supports Python, JavaScript, Go, Rust, Java, C/C++.
allowed-tools	Bash(skwaq *), Read, Grep, Glob
disable-model-invocation	true

Source Code Security Audit

Analyze source code at $ARGUMENTS for security vulnerabilities.

Steps

Ingest the source: skwaq ingest source $0
Initialize knowledge base: skwaq kb init
Run pattern analysis: skwaq analyze --quick
Run AI analysis with full agent pipeline: skwaq analyze
Review findings: skwaq viz findings
For each critical finding, explain the vulnerability and how to fix it

Focus on: injection, deserialization, command execution, XSS, SSRF, path traversal, and authentication/authorization issues.