Summary
- Java 白盒源码安全审计总方法论。当需要对 Java 项目进行完整的源码安全审计、
- 或需要系统化的白盒漏洞挖掘流程时触发。
- 覆盖 5 阶段审计流水线: 路由映射→权限建模→数据流追踪→分类漏洞审计→利用链组装。
- 核心机制: 证据合约系统(EVID_*)防止 AI 幻觉误报，所有漏洞结论必须有数据流证据支撑。
wgpsec/aboutsecurity
java-audit-pipeline
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
bigquery-pipeline-audit
Similar name
github/awesome-copilot
Audits Python + BigQuery pipelines for cost safety, idempotency, and production readiness. Retu…
8.8K installs
creating-ec2-image-builder-pipeline
Similar name
aws/agent-toolkit-for-aws
Creates a complete EC2 Image Builder pipeline that builds a custom AMI with pre-installed softw…
4K installs
azure-pipelines
Similar name
microsoft/vscode
Use when validating Azure DevOps pipeline changes for the VS Code build. Covers queueing builds…
2.8K installs
recruiting-pipeline
Similar name
anthropics/knowledge-work-plugins
Track and manage recruiting pipeline stages. Trigger with "recruiting update", "candidate pipel…
2.6K installs
pipeline-review
Similar name
anthropics/knowledge-work-plugins
Analyze pipeline health — prioritize deals, flag risks, get a weekly action plan. Use when runn…
2.5K installs
tao-run-automl-deft-pipeline
Similar name
nvidia/skills
Run the canonical NVIDIA AOI three-phase training pipeline — Phase 1 AutoML baseline (HPO), Pha…
1.5K installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 17 installs