Skill 审计报告
enterprise-vpn-attack 审计报告.
External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alto GlobalProtect, Pulse Secure / Ivanti Connect Secure, SonicWall, F5 Big-IP. Covers version fingerprinting, CVE matrix (2018-2026), AAA backend identification, default credentials, configuration-disclosure paths, pre-auth RCE/SSRF/path-traversal exploits where applicable. Built from authorized-engagement Cisco ASA testing plus 2024-2026 enterprise VPN CVE landscape. Use whenever the target's perimeter exposes any SSL VPN appliance or remote-access gateway — these are the most common initial-access points in 2024-2026 actor TTPs.
OpenAgentSkill 信任评分
OpenAgentSkill 信任评分
Trust Score 帮助 Agent 在安装前判断一个 Skill 是否足以进入候选清单。
GitHub 采用度
通过86
4.0K 个 GitHub Stars
Star/Fork 活跃度
通过83
4.0K 个 Star，629 个 Fork; 当前元数据中没有议题活跃度信息
近期维护
通过88
距上次推送 1 个月
许可证清晰度
通过86
MIT
README/SKILL.md 完整度
通过86
元数据包含足够的用法与工作流上下文
依赖与运行时风险
失败38
command execution surface, credential or environment access
安装可用性
通过92
npx skills add elementalsouls/Claude-BugHunter --skill enterprise-vpn-attack
安装命令安全性
通过92
标准软件包或运行时安装路径
权限范围
失败18
secrets or environment access, shell or command execution
仓库证据
通过86
https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/enterprise-vpn-attack
审查状态
信息66
可用 AI 审查数据
Agent 验证结果
信息54
暂未有 Agent 结果数据
检查项
安装与采用审查
安装路径
92
npx skills add elementalsouls/Claude-BugHunter --skill enterprise-vpn-attack
仓库
88
https://github.com/elementalsouls/Claude-BugHunter/tree/main/skills/enterprise-vpn-attack
许可证
86
MIT
维护
88
距上次推送 1 个月
AI 审查
55
The skill includes commands that could be used for unauthorized access if misused, but it explicitly states authorized-engagement context.
README/SKILL.md 完整度
86
Usable description available
依赖风险
38
command execution surface, credential or environment access
安装命令安全性
92
标准软件包或运行时安装路径
权限范围
18
secrets or environment access, shell or command execution
Star/Fork 活跃度
83
4.0K 个 Star，629 个 Fork; 当前元数据中没有议题活跃度信息
采用度
88
4.0K 个 GitHub Stars
Financial decision safety
20
Potential execution surface detected; do not connect live broker, exchange, wallet, or payment credentials.
警告
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Financial research output is not financial advice; require human review before any live investment decision
- Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
- The skill includes commands that could be used for unauthorized access if misused, but it explicitly states authorized-engagement context.
- The excerpt is truncated, but the full SKILL.md appears comprehensive.
- Financial research output is not financial advice; require human review before any live investment decision.
- This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
方法
本报告综合公开元数据、AI 审查输出、仓库活跃度、安装就绪度、OpenAgentSkill 事件、质量评分、信任检查和 Agent 安全门槛；它不是完整的源代码安全审计。
对比相近选项
下一步可审计的相关 Skill
Frontend Design
Guidance for distinctive, intentional UI design, typography, visual direction, and non-template-like product interfaces.
181K Stars · 审计报告
Taste Skill: Anti-Slop Frontend
Design and implementation guidance for distinctive landing pages, portfolios, product demos, and purposeful redesigns.
95K Stars · 审计报告
Canvas Design
Create original visual art, posters, PNG assets, and PDF documents through a clear design philosophy.
181K Stars · 审计报告