Summary
CTF 挑战中的源码审计方法。当发现 .git 目录、.bak/.zip 备份、/proc/self/environ 泄露源码时使用。与真实代码审计不同——CTF 源码中的漏洞是故意设置的，通常只有 1-2 个关键点。先找危险函数（sink），再追溯输入（source）到该函数的路径。覆盖…
wgpsec/aboutsecurity
ctf-source-audit
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
azure-resource-visualizer
Similar name
microsoft/azure-skills
Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the r…
566.5K installs
azure-resource-lookup
Similar name
microsoft/azure-skills
List, find, and show Azure resources across subscriptions or resource groups. Handles prompts l…
566.5K installs
azure-resource-visualizer
Similar name
github/awesome-copilot
Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the r…
8.9K installs
azure-resource-health-diagnose
Similar name
github/awesome-copilot
Analyze Azure resource health, diagnose issues from logs and telemetry, and create a remediatio…
8.7K installs
connecting-to-data-source
Similar name
aws/agent-toolkit-for-aws
Create and troubleshoot AWS Glue connections to JDBC databases (Oracle, SQL Server, PostgreSQL,…
5.2K installs
source-management
Similar name
anthropics/knowledge-work-plugins
Manages connected MCP sources for enterprise search. Detects available sources, guides users to…
4.8K installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 40 installs