The interface is localized. Skill descriptions and documents are machine-translated by AI into your language; code, commands, paths and technical terms stay in the original, and the author's document governs.
Explore skills
Development · SKILL.md

find-security-vulnerabilities-in-code

find-security-vulnerabilities-in-code

使用Strix在代码库或存储库中查找安全漏洞——这是一种白盒AI安全审查,可以读取您的源代码、实际数据流和授权模型的原因,然后利用它在实时沙箱中发现的内容,这样每个报告的问题都有一个可工作的概念证明,而不是嘈杂的静态分析警报。涵盖注入、XSS、SSRF、损坏的访问控制和IDOR、不安全的反序列化、代码中的秘密、不安全依赖关系和业务逻辑缺陷。当用户要求安全扫描、安全审查或审计其代码、仓库或漏洞拉取请求时使用。

Independent GitHub snapshot · Automated classification · Original documentation governs

Zzzz2929 / skills-zh-cnNOASSERTION

Skill documentation

GitHub
Loading documentation from the source…
Saved skills