wgpsec/aboutsecurity
dify-exploit
Dify LLM应用开发平台漏洞利用技能,涵盖两个CVE: CVE-2025-56520(远程文件上传接口SSRF,无需认证读取内网资源) 和 CVE-2025-55182(React Server Components反序列化RCE,Dify控制台基于Next.js构建)。 当用户提到…
Installation
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
React and Next.js performance optimization guidelines from Vercel Engineering. This skill shoul…
3.7K installsUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge F…
1.7K installsReact Native and Expo best practices for building performant mobile apps. Use when building Rea…
1.3K installsGuide for implementing smooth, native-feeling animations using React's View Transition API (`<V…
1.4K installsSanity development best practices for schema design, GROQ queries, TypeGen, Visual Editing, ima…
186 installs>- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities includin…
17 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Repository health
master
History
- First seen on skills.sh
- First recorded snapshot · 1 installs