security-audit

TotalClaw 作者 totalclaw

审计技能的最小助手。 MD风格的供应链风险说明。

安装 / 下载方式

TotalClaw CLI推荐

totalclaw skills install shop:totalclaw:totalclaw~cerbug45-agents-skill-security-audit

cURL直接下载，无需登录

curl -fsSL https://skills.taituai.com/api/skills/totalclaw%3Atotalclaw~cerbug45-agents-skill-security-audit/file -o cerbug45-agents-skill-security-audit.md

## 概述（中文）

审计技能的最小助手。 MD风格的供应链风险说明。

## 原文

# security-audit

Minimal helper to audit skill.md-style instructions for supply-chain risks.

## Features
- Heuristic scan for exfiltration patterns (HTTP POST, curl to unknown domains, reading ~/.env, credential keywords).
- Permission manifest reminder: lists filesystem/network touches it sees.
- Safe report: markdown summary + risk level.

## Usage
```bash
python audit.py path/to/skill.md > report.md
```