Secknowledge Skill
Pa55w0rd/secknowledge-skill
Web+AI 安全测试知识库。融合 WooYun 88,636 案例 + 先知 L1-L4 方法论 + GAARM 173 风险 + OWASP Top 10 (LLM/ASI/WSTG)。
安全测试助手 - 专业的应用安全测试与防护专家。适用场景： (1) Web应用安全测试（OWASP Top 10漏洞检测） (2) API安全测试（认证/授权/数据泄露） (3) 安全测试用例设计与评审 (4) 渗透测试方案制定与执行指导 (5) 安全漏洞分析与风险评估 (6) 安全加固建议与最佳实践 (7) 安全合规检查（GDPR/等保） (8) 安全测试报告编写…
Install Testing Security Tester
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install chendongqi/OPB-Skills testing-security-tester --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/testing-security-tester .claude/skills/testing-security-tester && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .claude/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-testerType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install chendongqi/OPB-Skills testing-security-tester --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/testing-security-tester .agents/skills/testing-security-tester && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .agents/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install chendongqi/OPB-Skills testing-security-tester --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/testing-security-tester .cursor/skills/testing-security-tester && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .cursor/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/chendongqi/OPB-Skills.git --path skills/testing-security-tester--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install chendongqi/OPB-Skills testing-security-tester --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/testing-security-tester .gemini/skills/testing-security-tester && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .gemini/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install chendongqi/OPB-Skills testing-security-testerInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/testing-security-tester .github/skills/testing-security-tester && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .github/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install chendongqi/OPB-Skills testing-security-tester --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/chendongqi/OPB-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/testing-security-tester .opencode/skills/testing-security-tester && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "testing-security-tester" agent skill from https://github.com/chendongqi/OPB-Skills/tree/main/skills/testing-security-tester into .opencode/skills/testing-security-tester/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "testing-security-tester", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
testing-security-tester- GitHub stars
- 125
- Token cost
- ~1.7k tokens
- SKILL.md length
- 172 words
- Files
- 1
- Skills in repo
- 75
- Repo updated
- First seen
- Licence
- None found
At a glance
安全测试助手 - 专业的应用安全测试与防护专家。适用场景： (1) Web应用安全测试（OWASP Top 10漏洞检测） (2) API安全测试（认证/授权/数据泄露） (3) 安全测试用例设计与评审 (4) 渗透测试方案制定与执行指导 (5) 安全漏洞分析与风险评估 (6) 安全加固建议与最佳实践 (7) 安全合规检查（GDPR/等保） (8) 安全测试报告编写…
- Works in 6 steps: OWASP Top 10 安全风险 → 常见漏洞测试方法 → API安全测试 → …
- Tasks that involve Web application vulnerabilities
- SKILL.md covers 核心工作流程, 输出模板 and 最佳实践
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Testing Security Tester is an agent skill from chendongqi/OPB-Skills. 安全测试助手 - 专业的应用安全测试与防护专家。适用场景： (1) Web应用安全测试（OWASP Top 10漏洞检测） (2) API安全测试（认证/授权/数据泄露） (3) 安全测试用例设计与评审 (4) 渗透测试方案制定与执行指导 (5) 安全漏洞分析与风险评估 (6) 安全加固建议与最佳实践 (7) 安全合规检查（GDPR/等保） (8) 安全测试报告编写 触发关键词：安全测试、渗透测试、OWASP、SQL注入、XSS、CSRF、漏洞扫描、安全评估、安全加固、认证授权
Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering Web application vulnerabilities. It works with SQL. The repository describes itself as: 一套覆盖一个公司完整业务的SKILL，适用ClaudeCode，Codex，OpenCode等工具.
When your agent uses it
- Tasks that involve Web application vulnerabilities
Example prompts
- “/testing-security-tester”
Workflow steps
6 steps, taken from the step headings in SKILL.md.
- OWASP Top 10 安全风险
- 常见漏洞测试方法
- API安全测试
- 安全扫描工具
- 安全风险评估
- 安全加固建议
What it can do on your machine
Read from SKILL.md and the folder at commit d587882. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Testing Security Tester loads about 1.7k tokens when it runs. Until then it costs about 66 tokens; SKILL.md has 172 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 172 words (~1,723 tokens).
- name
- testing-security-tester
Files
Just SKILL.md in skills/testing-security-tester of chendongqi/OPB-Skills.
Open the folder on GitHubat commit d587882
Compare with similar skills
Testing Security Tester next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Testing Security Tester this skillchendongqi/OPB-Skills | 125 | — | ~1.7k | Automated safety check: Pass | None | |
| Secknowledge SkillPa55w0rd/secknowledge-skill | 423 | — | ~2.7k | Automated safety check: Pass | None | |
| SecskillsArenbai/SecSkills | 251 | — | ~1.8k | Automated safety check: Notes | MIT | |
| Code Security AuditProgrammerAnthony/Expert-Coding-Harness | 235 | — | ~1.6k | Automated safety check: Pass | MIT | |
| Php Codeigniter Audit0xShe/PHP-Code-Audit-Skill | 402 | 1 repos | ~477 | Automated safety check: Pass | None | |
| Security ReviewerAratKruglik/claude-laravel | 155 | 1 repos | ~1.1k | Automated safety check: Notes | None |
Similar skills
Secskills
Arenbai/SecSkills
渗透测试实战技能 v1.3.0。覆盖信息收集、全类漏洞发现（注入全家桶/SSRF/文件类/反序列化/SSTI/越权逻辑/CSRF）、漏洞利用、后渗透、免杀全流程。
Code Security Audit
ProgrammerAnthony/Expert-Coding-Harness
A skill your agent uses when 用户需要对代码进行安全审计、发现安全漏洞、上线前安全评估、检查代码是否存在安全风险时。触发场景：代码安全审计、安全审计、白盒审计、安全扫描、漏洞检测、漏洞挖掘、SQL注入、命令注入、XSS、SSRF、反序列化、认证绕过、越权、代码安全检查、security audit、code…
Php Codeigniter Audit
0xShe/PHP-Code-Audit-Skill
CodeIgniter 框架特效安全审计工具。针对 CodeIgniter 的 CSRF、XSS 输出过滤、数据库查询构造、路由与验证器配置、会话 Cookie 安全等机制进行白盒静态审计，并映射到通用漏洞类型体系（CSRF/AUTH/XSS/SQL/CFG/SESS 等）。
Security Reviewer
AratKruglik/claude-laravel
A skill your agent uses when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security.
TS Review
liuyanghejerry/Clausura
TypeScript monorepo 审查：XSS、SQL 注入、密钥、any、console.log. An agent skill from liuyanghejerry/Clausura.
More from chendongqi/OPB-Skills
All 75 skills in this repoRnd Tech Arch Diagrammer
chendongqi/OPB-Skills
Technical architecture diagram creator using Excalidraw MCP tools.
Rnd Technical Writer
chendongqi/OPB-Skills
Technical article writing assistant. An agent skill from chendongqi/OPB-Skills.
App Namer
chendongqi/OPB-Skills
Generate creative, memorable, and appropriate names for software applications, products, and services.
Rnd Blog Series Planner
chendongqi/OPB-Skills
Technical blog series planning assistant. An agent skill from chendongqi/OPB-Skills.
Rnd Code Simplify
chendongqi/OPB-Skills
Expert code simplification and refactoring specialist that autonomously enhances code clarity, consistency, and maintainability while preserving exact functionality.
Aspice Sys To Swe
chendongqi/OPB-Skills
Analyze automotive system requirements (ASPICE SYS.2) and decompose them into software requirements (ASPICE SWE.1) for new energy vehicle onboard systems.
Related
Works with
Categories
Questions about Testing Security Tester
What does Testing Security Tester do?
安全测试助手 - 专业的应用安全测试与防护专家。适用场景： (1) Web应用安全测试（OWASP Top 10漏洞检测） (2) API安全测试（认证/授权/数据泄露） (3) 安全测试用例设计与评审 (4) 渗透测试方案制定与执行指导 (5) 安全漏洞分析与风险评估 (6) 安全加固建议与最佳实践 (7) 安全合规检查（GDPR/等保） (8) 安全测试报告编写…. Testing Security Tester is an agent skill from chendongqi/OPB-Skills.
When should I use Testing Security Tester?
Testing Security Tester fits situations like: tasks that involve Web application vulnerabilities.
How do I install Testing Security Tester in Claude Code?
Run `npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a claude-code`. Or copy the skill folder (skills/testing-security-tester in chendongqi/OPB-Skills) into .claude/skills/testing-security-tester in your project. Claude Code loads it when a task matches its description.
How do I install Testing Security Tester in Codex?
Run `npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a codex`. Or copy the skill folder (skills/testing-security-tester in chendongqi/OPB-Skills) into .agents/skills/testing-security-tester in your project. Codex loads it when a task matches its description.
Can I use Testing Security Tester in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add chendongqi/OPB-Skills --skill testing-security-tester -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/testing-security-tester, .gemini/skills/testing-security-tester, .github/skills/testing-security-tester and .opencode/skills/testing-security-tester in your project.
What does Testing Security Tester need to run?
SKILL.md names no scripts, command-line tools or credentials: Testing Security Tester is instructions for the agent only.
Does Testing Security Tester access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Testing Security Tester safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Testing Security Tester use?
No licence was found for Testing Security Tester or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Testing Security Tester use?
About 1.7k tokens (SKILL.md is roughly 6.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Testing Security Tester?
Skills that share tags, products or a category with Testing Security Tester: Secknowledge Skill (Pa55w0rd/secknowledge-skill, 423 stars), Secskills (Arenbai/SecSkills, 251 stars), Code Security Audit (ProgrammerAnthony/Expert-Coding-Harness, 235 stars) and Php Codeigniter Audit (0xShe/PHP-Code-Audit-Skill, 402 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Testing Security Tester?
chendongqi (a GitHub user) maintains it in chendongqi/OPB-Skills, which has 125 GitHub stars. The repository holds 75 skills in this directory. The repository was last updated on February 11, 2026.
Source: chendongqi/OPB-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.