The full skill instructions and embedded helper script are in skills/pdf2plot.md at the root of this repository. Read that file now and follow its instructions.
skill
code-security-audit
ANo problem foundssrsec/code-security-audit
AI 驱动的生产级代码安全审计协议。面向企业内部授权审计，默认使用结构化 harness：项目画像、攻击面枚举、Sink/Control 双轨候选发现、验证队列、能力链、质量门、报告渲染和完整证据交付。支持 PHP、Java、C# / ASP.NET、Go、Python、JavaScript / TypeScript Node.js、Ruby、Rust、Kotlin、Deno/Bun，以及 JVM/.NET 编译产物反编译计划。用户说「开始审计 / 对 XXX 做安全审计 / 代码审计 / 安全扫描 / 找漏洞 / security audit / 红队审计」时触发。
code-security-audit got grade A on our automated scan on 2026-10-19.
Details
Source
Public file: https://github.com/ssrsec/code-security-audit/blob/e867a05874bd1df609342c023ef0aa8dbb64b22b/SKILL.md
Last scanned: (Oct 19, 2026, 8:14 a.m. ET)
Category: uncategorized
License: None found
Before you install
- Read any scripts this skill ships.
- Note every URL it fetches.
- Check allowed-tools and hooks.
Embed this grade
Add this badge to your README. It shows the current grade from CheckSkills.
Report this skill if the grade looks wrong, or if something slipped through.
Related
Run all code generation (protobuf, sqlc, frontend build)
name: ship description: Release protocol: pre-flight checks, changelog, semantic version, tag, deploy. disable-model-invocation: true
name: init description: Bootstrap the .resonance/ project memory (soul, state, docs scaffold). Run once per new project. disable-model-invocation: true
name: goal description: The autonomous goal loop: frame, decompose, then build and verify each slice against real checks, bounded, never auto-ship. disable-model-invocation: true