Skill 审计报告
acl-abuse 审计报告.
Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, WriteOwner, AddMember, ForceChangePassword, and replication rights via DS-Replication-Get-Changes-All). Use when BloodHound CE shows an outbound control edge from a principal you own toward a higher-value object, and you want the exact bloodyAD/impacket command to weaponize that ACE, plus detection and remediation. DCSync is covered here strictly as a post-compromise technique, not a user entry path.
OpenAgentSkill 信任评分
OpenAgentSkill 信任评分
Trust Score 帮助 Agent 在安装前判断一个 Skill 是否足以进入候选清单。
GitHub 采用度
信息62
153 个 GitHub Stars
Star/Fork 活跃度
警告57
153 个 Star，24 个 Fork; 当前元数据中没有议题活跃度信息
近期维护
通过88
距上次推送 2 个月
许可证清晰度
通过86
MIT
README/SKILL.md 完整度
通过86
元数据包含足够的用法与工作流上下文
依赖与运行时风险
信息72
凭据或环境变量访问
安装可用性
通过92
npx skills add ADScanPro/Claude-AD --skill acl-abuse
安装命令安全性
通过92
标准软件包或运行时安装路径
权限范围
警告50
secrets or environment access, shell or command execution
仓库证据
通过86
https://github.com/ADScanPro/Claude-AD/tree/main/skills/acl-abuse
审查状态
通过88
可用 AI 审查数据
Agent 验证结果
信息54
暂未有 Agent 结果数据
检查项
安装与采用审查
安装路径
92
npx skills add ADScanPro/Claude-AD --skill acl-abuse
仓库
88
https://github.com/ADScanPro/Claude-AD/tree/main/skills/acl-abuse
许可证
86
MIT
维护
88
距上次推送 2 个月
AI 审查
88
Approved with no listed issues
README/SKILL.md 完整度
86
Usable description available
依赖风险
72
凭据或环境变量访问
安装命令安全性
92
标准软件包或运行时安装路径
权限范围
50
secrets or environment access, shell or command execution
Star/Fork 活跃度
57
153 个 Star，24 个 Fork; 当前元数据中没有议题活跃度信息
采用度
68
153 个 GitHub Stars
警告
- Permission surface may require sandboxing
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Stars/forks activity: 153 stars, 24 forks; issue activity unavailable in current metadata
- Permission surface: secrets or environment access, shell or command execution
方法
本报告综合公开元数据、AI 审查输出、仓库活跃度、安装就绪度、OpenAgentSkill 事件、质量评分、信任检查和 Agent 安全门槛；它不是完整的源代码安全审计。
对比相近选项
下一步可审计的相关 Skill
stop-slop
Eliminates predictable AI writing patterns from prose while preserving specific meaning and reader trust.
16K Stars · 审计报告
unslop
Applies Cursor's prose-discipline rules to remove filler and AI writing tells from agent-facing and user-facing text.
4.8K Stars · 审计报告
Humanizer
Rewrites AI-sounding text so it reads naturally while preserving every factual claim and matching the writer's voice.
37K Stars · 审计报告