# Skills

> 安全工程师 Skills 总控

- Skill: `zhaoxuya520/skills-15` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add zhaoxuya520/skills-15`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zhaoxuya520/skills-15/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: zhaoxuya520 (https://skillmd.com/u/zhaoxuya520)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zhaoxuya520/skills-15

---

# 安全工程师 Skills 总控

## 当前 Skills

| Skill | 适用场景 | 来源 |
|-------|---------|------|
| [threat-modeling](threat-modeling/SKILL.md) | 威胁建模 | STRIDE + Microsoft SDL |
| [code-security-review](code-security-review/SKILL.md) | 代码安全审查 | SAST + OWASP Code Review |
| [web-vulnerability](web-vulnerability/SKILL.md) | Web 漏洞 | OWASP Top 10 2021 |
| [auth-security-audit](auth-security-audit/SKILL.md) | 认证鉴权审计 | OWASP Testing Guide |
| [supply-chain-security](supply-chain-security/SKILL.md) | 供应链安全 | SLSA + Sigstore |
| [security-report](security-report/SKILL.md) | 安全报告 | CVSS + 修复建议 |
| [dependency-audit](dependency-audit/SKILL.md) | 依赖安全审计 | npm audit + Snyk + Trivy + 密钥扫描 |

## 统一入口

1. 先读 `routing.md`
2. 再进入对应 SKILL.md

## 新增 Skill

按 `CONTRIBUTING.md` 流程新增。