Web 项目安全代码审计 skill，自动识别 Go / Java / Python / PHP / JavaScript 项目类型并加载对应漏洞清单（SQL/SSRF/XSS/CSRF/反序列化/路径穿越/鉴权/命令注入/XXE 等），输出审计报告到被审计项目的 reports/ 目录。适用于：(1) 单仓库 Web 项目的中高危漏洞扫描，(2) 自动生成可复现的漏洞报告（含代码位置、复现 curl、修复建议、修复后验证），(3) 对每条漏洞并行启动子 Agent 进行可利用性验证，输出 PoC 步骤或误判说明。只审计 High/Medium，跳过 Low。
How to install web-vuln-audit?
zhiyuwang720-dev/codeauditskill/web-vuln-audit
$npx -y skills add zhiyuwang720-dev/codeauditskill --skill web-vuln-auditInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/zhiyuwang720-dev/codeauditskill" --skill "zhiyuwang720-dev/codeauditskill/web-vuln-audit"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/zhiyuwang720-dev/codeauditskill" that are relevant to the current task. Run `npx skills add "https://github.com/zhiyuwang720-dev/codeauditskill"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- gpt-image-2Create or edit images with Pilio GPT Image 2 through the unified Pilio developer API.Jul 2026
- spec-driven-implementationDrive a spec-first workflow for substantial features by writing PRODUCT.md before implementation, writing TECH.md when warranted, and keeping both specs…Jul 2026
- review-prReview a pull request diff and write structured feedback to review.json for the workflow to publish.Jul 2026
- write-product-specWrite a PRODUCT.md spec for a significant user-facing feature in Warp, focused on detailed behavior and validation.Jul 2026
- write-tech-specWrite a TECH.md spec for a significant Warp feature after researching the current codebase and implementation constraints.Jul 2026
- fix-errorsFix compilation errors, linting issues, and test failures in the warp Rust codebase. Covers presubmit checks, WASM-specific errors, and running specific tests.Jul 2026
