Laporan audit skill
acl-abuse Laporan audit.
Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, WriteOwner, AddMember, ForceChangePassword, and replication rights via DS-Replication-Get-Changes-All). Use when BloodHound CE shows an outbound control edge from a principal you own toward a higher-value object, and you want the exact bloodyAD/impacket command to weaponize that ACE, plus detection and remediation. DCSync is covered here strictly as a post-compromise technique, not a user entry path.
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Info62
153 star GitHub
Aktivitas star/fork
Peringatan57
153 star dan 24 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus88
2 bulan sejak push
Kejelasan lisensi
Lulus86
MIT
Kelengkapan README/SKILL.md
Lulus86
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Info72
Akses kredensial atau variabel lingkungan
Ketersediaan pemasangan
Lulus92
npx skills add ADScanPro/Claude-AD --skill acl-abuse
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Peringatan50
secrets or environment access, shell or command execution
Bukti repositori
Lulus86
https://github.com/ADScanPro/Claude-AD/tree/main/skills/acl-abuse
Status peninjauan
Lulus88
Data tinjauan AI tersedia
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add ADScanPro/Claude-AD --skill acl-abuse
Repositori
88
https://github.com/ADScanPro/Claude-AD/tree/main/skills/acl-abuse
Lisensi
86
MIT
Pemeliharaan
88
2 bulan sejak push
Tinjauan AI
88
Approved with no listed issues
Kelengkapan README/SKILL.md
86
Usable description available
Risiko dependensi
72
Akses kredensial atau variabel lingkungan
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
50
secrets or environment access, shell or command execution
Aktivitas star/fork
57
153 star dan 24 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
68
153 star GitHub
Peringatan
- Permission surface may require sandboxing
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Stars/forks activity: 153 stars, 24 forks; issue activity unavailable in current metadata
- Permission surface: secrets or environment access, shell or command execution
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar
Skill terkait untuk diaudit berikutnya
stop-slop
Eliminates predictable AI writing patterns from prose while preserving specific meaning and reader trust.
16K Star · Laporan audit
unslop
Applies Cursor's prose-discipline rules to remove filler and AI writing tells from agent-facing and user-facing text.
4.8K Star · Laporan audit
Humanizer
Rewrites AI-sounding text so it reads naturally while preserving every factual claim and matching the writer's voice.
37K Star · Laporan audit