Loading…
AI 驱动的生产级代码安全审计协议。面向企业内部授权审计，默认使用结构化 harness：项目画像、攻击面枚举、Sink/Control 双轨候选发现、验证队列、能力链、质量门、报告渲染和完整证据交付。支持 PHP、Java、C# / ASP.NET、Go、Python、JavaScript / TypeScript Node.js、Ruby、Rust、Kotlin、Deno/Bun，以及 JVM/.NET 编译产物反编译计划。用户说「开始审计 / 对 XXX 做安全审计 / 代码审计 / 安全扫描 / 找漏洞 / security audit / 红队审计」时触发。
code-security-audit is an agent skill entry in ChatHome Skills, sourced from GitHub Skill Search and scored 58/100. # 代码安全审计生产协议 本入口默认执行代码安全审计生产协议。 ## 授权与安全边界 本 skill 仅用于企业内部授权的防御性代码安全审计。审计目标、靶场地址、凭据和验证动作必须属于授权范围。 - L1：只读分析和只读请求，默认允许。 - L2：可回滚写操作，授权靶场内默认允许自动执行，必须记录 baseline、p. As an agent skill, it packages a reusable instruction set that AI coding agents such as Codex and Claude Code can load to perform this task without hand-written glue code. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding code-security-audit to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
codex skill install ssrsec/code-security-auditReview the upstream source before running this command.
Scan coverage: Install metadata and the indexed document body.
Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.
# 代码安全审计生产协议 本入口默认执行代码安全审计生产协议。 ## 授权与安全边界 本 skill 仅用于企业内部授权的防御性代码安全审计。审计目标、靶场地址、凭据和验证动作必须属于授权范围。 - L1：只读分析和只读请求，默认允许。 - L2：可回滚写操作，授权靶场内默认允许自动执行，必须记录 baseline、proof、cleanup 和 post-