Informe de auditoría del skill
attack-surface Informe de auditoría.
Maps every entry point, component, and trust boundary of a target before testing begins prevents missed coverage and prioritizes the highest-value attack paths. Trigger when the user provides a target and wants to know where to start, says "map the attack surface", "what should I test", or "where do I begin", or is starting any engagement after scope-grill is complete.
Trust Score de OpenAgentSkill
Trust Score de OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopción en GitHub
Advertencia48
36 estrellas de GitHub
Actividad de stars/forks
Advertencia43
36 estrellas y 9 forks; la actividad de issues no está disponible en los metadatos actuales
Mantenimiento reciente
Aprobado88
1 meses desde el último push
Claridad de licencia
Aprobado86
MIT
Completitud de README/SKILL.md
Info76
Los metadatos públicos necesitan más contexto de README/SKILL.md
Riesgo de dependencias/runtime
Info64
credential or environment access, network or browser surface
Disponibilidad de instalación
Aprobado92
npx skills add Rifteo/skills --skill attack-surface
Seguridad del comando de instalación
Aprobado92
Ruta estándar de paquete o instalación en tiempo de ejecución
Superficie de permisos
Advertencia46
secrets or environment access, filesystem or document access
Evidencia del repositorio
Aprobado86
https://github.com/Rifteo/skills/tree/main/attack-surface
Estado de revisión
Info66
Hay datos de revisión por IA disponibles
Resultados comprobados por Agent
Info54
Aún no hay datos de resultados del Agent
Comprobaciones
Revisión de instalación y adopción
Ruta de instalación
92
npx skills add Rifteo/skills --skill attack-surface
Repositorio
88
https://github.com/Rifteo/skills/tree/main/attack-surface
Licencia
86
MIT
Mantenimiento
88
1 meses desde el último push
Revisión por IA
55
SKILL.md does not include an explicit authorization/scope guardrail; it assumes an engagement is already authorized but does not instruct the agent to verify scope boundaries.
Completitud de README/SKILL.md
84
Usable description available
Riesgo de dependencias
64
credential or environment access, network or browser surface
Seguridad del comando de instalación
92
Ruta estándar de paquete o instalación en tiempo de ejecución
Superficie de permisos
46
secrets or environment access, filesystem or document access
Actividad de stars/forks
43
36 estrellas y 9 forks; la actividad de issues no está disponible en los metadatos actuales
Adopción
42
36 estrellas de GitHub
Advertencias
- Permission surface may require sandboxing
- SKILL.md does not include an explicit authorization/scope guardrail; it assumes an engagement is already authorized but does not instruct the agent to verify scope boundaries.
- Phase 3 depends on a `check-exploit` skill that is not bundled or described, so the workflow may be incomplete if that skill is unavailable.
- Phase 1 provides categories but no concrete read-only enumeration tooling or commands, making output quality dependent on the model's prior knowledge.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: secrets or environment access, filesystem or document access
- GitHub adoption: 36 GitHub stars
- Stars/forks activity: 36 stars, 9 forks; issue activity unavailable in current metadata
- Permission surface: secrets or environment access, filesystem or document access
Método
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Comparar opciones cercanas
Skills relacionados para auditar después
Code Review
Review a branch or diff against repository standards and the originating spec in two independent analysis passes.
169K Estrellas · Informe de auditoría
Appsmith
Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
41K Estrellas · Informe de auditoría
Implement
Implement work from an approved spec or ticket set, run focused and full tests, invoke code review, and commit the result to the current branch.
176K Estrellas · Informe de auditoría