Back to Details

security-skills-guide

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Security Skills Guide

安全技能指南

Scope

适用范围

Use this skill when:
  • Finding or adding security-related skills
  • Understanding cybersecurity skill categories
  • Organizing security skills in README.md
在以下场景使用本技能：
  • 查找或添加安全相关技能
  • 了解网络安全技能分类
  • 在README.md中整理安全技能

Security Skill Categories

安全技能分类

Penetration Testing

渗透测试

CategorySkills
Web ApplicationBurp Suite, FFUF fuzzing, SQL injection, XSS testing
NetworkNmap, Wireshark, SMTP/SSH testing
CloudAWS/Azure/GCP penetration testing
Active DirectoryKerberoasting, DCSync, pass-the-hash
分类技能
Web应用Burp Suite、FFUF模糊测试、SQL注入、XSS测试
网络Nmap、Wireshark、SMTP/SSH测试
云AWS/Azure/GCP渗透测试
活动目录Kerberoasting、DCSync、哈希传递

Code Auditing

代码审计

CategorySkills
Static AnalysisCodeQL, Semgrep, Slither
Smart ContractsSolidity security, Move auditing
Variant AnalysisFinding similar vulnerabilities
分类技能
静态分析CodeQL、Semgrep、Slither
智能合约Solidity安全、Move审计
变体分析查找相似漏洞

Threat Hunting

威胁狩猎

CategorySkills
Detection RulesSigma rules, YARA
ForensicsFile metadata, memory analysis
Incident ResponseTriage, investigation
分类技能
检测规则Sigma规则、YARA
取证文件元数据、内存分析
事件响应分类排查、调查

Key Security Skill Repositories

重要安全技能仓库

Trail of Bits Security Team

Trail of Bits安全团队

  • trailofbits/skills
    - Static analysis, code auditing, smart contracts
  • trailofbits/skills
    - 静态分析、代码审计、智能合约

Antigravity Collection

Antigravity技能集合

  • sickn33/antigravity-awesome-skills
    - 50+ cybersecurity skills
  • sickn33/antigravity-awesome-skills
    - 50+网络安全技能

Community Skills

社区技能

  • mhattingpete/claude-skills-marketplace
    - Computer forensics skills
  • mhattingpete/claude-skills-marketplace
    - 计算机取证技能

Where to Add Security Skills in README

如何在README中添加安全技能

  • Penetration testing tools: 
    Cybersecurity & Penetration Testing
  • Code analysis tools: 
    Security & Systems
    or 
    Development & Code Tools
  • Threat hunting: 
    Security & Systems
  • Smart contract security: 
    Development & Code Tools
    (if dev-focused)
  • 渗透测试工具：
    Cybersecurity & Penetration Testing
  • 代码分析工具：
    Security & Systems
    或 
    Development & Code Tools
  • 威胁狩猎：
    Security & Systems
  • 智能合约安全：
    Development & Code Tools
    （若以开发为重点）

Security Skill Best Practices

安全技能最佳实践

  1. Clear scope: Define what the skill does and doesn't do
  2. Legal warnings: Include responsible use disclaimers
  3. Tool requirements: List required external tools
  4. Safe defaults: Use non-destructive operations by default
  5. Logging: Include audit trail capabilities
  1. 明确范围：定义技能的适用与不适用场景
  2. 法律警告：添加负责任使用的免责声明
  3. 工具要求：列出所需的外部工具
  4. 安全默认设置：默认使用非破坏性操作
  5. 日志记录：包含审计追踪功能

Example Security Skill Structure

安全技能结构示例

threat-hunting/
├── SKILL.md           # Main instructions
├── scripts/
│   ├── sigma-search.py
│   └── log-parser.sh
├── references/
│   └── sigma-rules.md
└── templates/
    └── report.md
threat-hunting/
├── SKILL.md           # Main instructions
├── scripts/
│   ├── sigma-search.py
│   └── log-parser.sh
├── references/
│   └── sigma-rules.md
└── templates/
    └── report.md

Full Resource List

完整资源列表

For more detailed security skill resources, complete link lists, or the latest information, use WebFetch to retrieve the full README.md:
https://raw.githubusercontent.com/gmh5225/awesome-skills/refs/heads/main/README.md
The README.md contains the complete categorized resource list with all links.
如需更详细的安全技能资源、完整链接列表或最新信息，可使用WebFetch获取完整的README.md：
https://raw.githubusercontent.com/gmh5225/awesome-skills/refs/heads/main/README.md
该README.md包含所有链接的完整分类资源列表。