secure-code-review
Systematically reviews code for SQL injection, XSS, SSRF, broken access control, cryptographic failures, and other common OWASP Top 10 vulnerabilities, providing vulnerable code examples and ready-to-use remediation guidance. Trigger this skill when users ask for a security review, vulnerability scan, or penetration testing assistance, or mention keywords like OWASP, SQL injection, XSS, code audit, or security checklist.
安装与集成
选择最适合你的安装与部署方式
在 NextCoWork 内置终端或任意系统控制台中执行命令，自动下载、校验 SHA-256 并安装到全局技能目录（已登录账户时跟随账户作用域）：
关于这个 Skill
技能描述、工作机制与能力概览
Systematically reviews code for SQL injection, XSS, SSRF, broken access control, cryptographic failures, and other common OWASP Top 10 vulnerabilities, providing vulnerable code examples and ready-to-use remediation guidance. Trigger this skill when users ask for a security review, vulnerability scan, or penetration testing assistance, or mention keywords like OWASP, SQL injection, XSS, code audit, or security checklist.
受控运行于渲染进程 IPC 安全边界内，遵循最小特权原则。
内置结构化 Frontmatter 声明与清晰完备的指令执行树。
支持即装即用与无缝更新，无需频繁重启 Agent 运行引擎。
版本历史与更新日志
查看每个版本的变更记录与完整性校验码