by zhaji2333 · Codex Skill · ★ 85
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/zhaji2333/CkSKILLS.gitTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 85 |
| Forks | 11 |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 52/100 |
| Open Issues | 1 |
| Last Updated | 2026-09-15 |
| Created | 2026-08-04 |
| Platforms | claude-code, codex |
| Est. Tokens | ~15k |
CK-Skills 基于 Claude Code / Codex 的 SRC 漏洞挖掘 Agent 技能体系 —— 将顶尖安全研究员的方法论沉淀为可调度、可复用的 Skill 知识资产。 语言： 中文 · English 📌 项目简介 CK-Skills 是一套面向 SRC 漏洞挖掘的 Agent 提示词工程与技能知识体系,以 Claude Code / Codex 等通用 Agent 框架为运行时,通过 系统级提示词(AGENTS.md)+ 20 个专项技能知识库(Skills),让通用 Agent 在垂直安全领域达到专家级表现。 针对通用 Agent 在垂直领域的三大痛点: 方法论散、覆盖不全 浅尝辄止、不按专家流程执行 业务逻辑 / 越权 / WAF 绕过等经验型漏洞难以自动化 🏗 架构设计 五层架构,各司其职:...
Looking for a CkSKILLS alternative? If you're comparing CkSKILLS with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.
AI-native security toolkit — fray go target.com scans everything. 7,800+ payloads, 98 WAF vendors, 42+ recon c
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI se
💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration test
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autono
An MCP server for loading skills (shim for non-claude clients).
Explore other popular codex skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: