SkillsAdd

wgpsec/aboutsecurity

java-auth-config-audit

Java 源码认证与配置安全审计。当在 Java 白盒审计中需要检测认证绕过、权限缺陷或安全配置问题时触发。 覆盖 6 类风险: 认证绕过(Spring Security/Shiro Filter 链 URI 解析差异)、 越权(IDOR/水平越权/垂直越权)、JWT 安全(算法混淆/密钥泄露/Claims…

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗

Summary

  • Java 源码认证与配置安全审计。当在 Java 白盒审计中需要检测认证绕过、权限缺陷或安全配置问题时触发。
  • 覆盖 6 类风险: 认证绕过(Spring Security/Shiro Filter 链 URI 解析差异)、
  • 越权(IDOR/水平越权/垂直越权)、JWT 安全(算法混淆/密钥泄露/Claims…

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

firebase-remote-config-basics Similar name
firebase/agent-skills

>- Manages Firebase Remote Config templates, feature flags, loading strategies, and SDKs (Andro…

94.5K installs
editorconfig Similar name
github/awesome-copilot

Generates a comprehensive and best-practice-oriented .editorconfig file based on project analys…

11K installs
mcp-configure Similar name
github/awesome-copilot

Configure an MCP server for GitHub Copilot with your Dataverse environment.

7K installs
configuring-vpc-endpoints-for-private-aws-service-access Similar name
aws/agent-toolkit-for-aws

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS Priva…

4.7K installs
configure Similar name
anthropics/claude-plugins-official

Set up the Discord channel — save the bot token and review access policy. Use when the user pas…

2.8K installs
aiconfig-tools Similar name
launchdarkly/ai-tooling

DEPRECATED redirect — this skill was renamed to tools. Do not use this skill; invoke tools inst…

2.7K installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 17 installs