What security categories does this guide cover?

The guide covers four primary domains: Penetration Testing (web, network, cloud), Code Auditing (static analysis, smart contracts), Threat Hunting (detection rules, forensics), and Incident Response.

Does this guide include tools for smart contract security?

Yes, it specifically highlights skills for auditing Solidity and Move smart contracts, as well as general static analysis tools like Slither.

How does this skill help with safe AI security testing?

It provides a 'Best Practices' framework that emphasizes clear scoping, legal warnings, safe defaults, and audit logging to ensure security tasks are performed responsibly.

Can I use this for network penetration testing?

Yes, the guide provides categories and organization for network-level skills involving tools like Nmap, Wireshark, and SSH testing.

Security Skills Guide

Name: Security Skills Guide
Author: gmh5225

bygmh5225

•

安全与测试

Provides a comprehensive framework for finding, organizing, and implementing security-focused agent skills across penetration testing, code auditing, and threat hunting.

关于

This skill acts as a specialized directory and implementation guide for security-related capabilities within AI coding agents like Claude Code. It helps users navigate complex cybersecurity domains including web application penetration testing, cloud security, static code analysis, and digital forensics by providing structured categories and best practices. By standardizing the organization of security skills—including essential legal disclaimers, safe defaults, and tool requirements—it enables developers and security researchers to perform systematic audits and investigations with AI assistance while maintaining high standards for logging and responsible use.

主要功能

Categorizes security skills into pentesting, code auditing, and threat hunting
Defines standardized structures for security skill documentation and scripts
1 GitHub stars
Outlines best practices for legal compliance and safe default operations
Provides curated links to expert repositories like Trail of Bits and Antigravity
Maps specific security tools like CodeQL and Burp Suite to agent capabilities

使用场景

Organizing a custom library of cybersecurity skills for automated testing
Implementing standardized code auditing workflows for smart contracts
Creating a structured framework for AI-driven threat hunting and forensics

关于

主要功能

Categorizes security skills into pentesting, code auditing, and threat hunting
Defines standardized structures for security skill documentation and scripts
1 GitHub stars
Outlines best practices for legal compliance and safe default operations
Provides curated links to expert repositories like Trail of Bits and Antigravity
Maps specific security tools like CodeQL and Burp Suite to agent capabilities

使用场景

Organizing a custom library of cybersecurity skills for automated testing
Implementing standardized code auditing workflows for smart contracts
Creating a structured framework for AI-driven threat hunting and forensics