Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecure…
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Use npx skills add to install this skill into the selected agent. Phase 0 commands are generated from source rules, not verified.
npx skills add https://github.com/trailofbits/skills/blob/main/plugins/insecure-defaults/skills/insecure-defaults/SKILL.md -g -a codex -yDrop `-g` to install project-locally
API安全测试的专业技能和方法论
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via
WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorizati
| this skill · 当前insecure defaults | api-security-testing | aig-scanner | wooyun-legacy | |
|---|---|---|---|---|
| Rating · 评分 | — | — | — | — |
| Stars · 星标 | 5.1k | 3.7k | 3.6k | 1.6k |
| Risk · 风险 | Medium risk · 中风险 | Medium risk · 中风险 | Medium risk · 中风险 | Low risk · 低风险 |
| Best for · 最适合 | Weak defaults: DEBUG.*=.*true, AUTH.*=.*false, CORS.*=.*\* | API安全测试的专业技能和方法论 | A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via | WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorizati |
| Not for · 不适合 | Workflows that require stronger human review than this catalog entry documents. | Workflows that require stronger human review than this catalog entry documents. | Workflows that require stronger human review than this catalog entry documents. | Workflows that require stronger human review than this catalog entry documents. |