Deepsec Documentation Guide
vercel-labs/deepsec
Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.
A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.
Install Authorized Artifact Auditor
The automated check flagged lines worth reading first. See the safety section below.
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install ptn1411/skill authorized-artifact-auditor --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
Claude Code skills documentation · loads skills from .claude/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .claude/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install ptn1411/skill authorized-artifact-auditor --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .agents/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install ptn1411/skill authorized-artifact-auditor --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .cursor/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install ptn1411/skill authorized-artifact-auditor --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .gemini/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install ptn1411/skill authorized-artifact-auditorInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .github/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ptn1411/skill --skill authorized-artifact-auditor -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install ptn1411/skill authorized-artifact-auditor --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "authorized-artifact-auditor" agent skill from https://github.com/ptn1411/skill/tree/main into .opencode/skills/authorized-artifact-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "authorized-artifact-auditor", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
authorized-artifact-auditor- GitHub stars
- 219
- Token cost
- ~3.3k tokens
- SKILL.md length
- 1,407 words
- Files
- 29 (incl. scripts)
- Skills in repo
- 22
- Repo updated
- First seen
- Licence
- None found
At a glance
A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.
- Works in 5 steps: Intake and Scope → Identify → Recover and Map → …
- Analyzing owned
- SKILL.md covers Operating Scope, Hard Boundary, Authorization Handling and Assessment Dispatch…, plus 4 more sections
- Runs Python scripts from its folder; calls python
What it does
Authorized Artifact Auditor is an agent skill from ptn1411/skill. Use when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.
Its SKILL.md is about 3.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 33 other files, including scripts (for example `INSTALL.md`, `MASTER_POLICY.md` and `README.md`).
It sits in Security. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…
When your agent uses it
- Analyzing owned
- Authorized software artifacts for source recovery
- Architecture mapping
- Security auditing
Example prompts
- “/authorized-artifact-auditor”
Requirements
- Python 3
Workflow steps
5 steps, taken from the step headings in SKILL.md.
- Intake and Scope
- Identify
- Recover and Map
- Audit
- Remediate
What it can do on your machine
Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Python, from the files we listed), which the agent can run.
Shell commands in SKILL.md call:
python
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Authorized Artifact Auditor loads about 3.3k tokens when it runs. Until then it costs about 48 tokens; SKILL.md has 1,407 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: warnings
The automated check found patterns that need a careful read before installing.
- WarningContains zero-width charactersSKILL.md:72
| `http(s)://…⟨U+200B⟩.js.map` sourcemap URL | **orchestrate.py** (javascript-deobfuscator) | JS source recovery |
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 1,407 words (~3,317 tokens).
“Use this skill only for software artifacts the user owns or is authorized to assess. The goal is to recover understanding, map architecture, audit security posture, and produce defensive fixes or reports.”
- name
- authorized-artifact-auditor
Files
SKILL.md and 28 other files (scripts) in the repository root of ptn1411/skill.
- SKILL.md
- .gitignore
- INSTALL.md
- MASTER_POLICY.md
- README.md
- TOOLS.md
- agents/codex.yaml
- agents/gemini.yaml
- agents/openai.yaml
- antigravity-kit
- cowork
- docs/skill_playbook.html
- docs/superpowers/plans/2026-05-12-skills-7-8-10.md
- qr-sepay.png
- requirements.txt
- scripts/assess.py
- … and 13 more
Open the folder on GitHubat commit ce2b65e
Compare with similar skills
Authorized Artifact Auditor next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Authorized Artifact Auditor this skillptn1411/skill | 219 | — | ~3.3k | Automated safety check: Warn | None | |
| Deepsec Documentation Guidevercel-labs/deepsec | 8.1k | — | ~956 | Automated safety check: Pass | Apache-2.0 | |
| Skill Scannergetsentry/skills | 1k | 4 repos | ~2.5k | Automated safety check: Warn | Apache-2.0 | |
| Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit | 481 | 1 repos | ~3.3k | Automated safety check: Pass | None | |
| Security Alert Triageelastic/agent-skills | 592 | 1 repos | ~3.5k | Automated safety check: Notes | Apache-2.0 | |
| Shiro Attack CLISummerSec/ShiroAttack2 | 2.6k | — | ~945 | Automated safety check: Pass | MIT |
Similar skills
- Official
- Official
Skill Scanner
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
Serenity Aleabitoreddit
yan-labs/serenity-aleabitoreddit
Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.
- Official
Security Alert Triage
elastic/agent-skills
Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.
Shiro Attack CLI
SummerSec/ShiroAttack2
当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…
Cve Remediation
rundeck/rundeck
Verify if a CVE affects the project and remediate it. An agent skill from rundeck/rundeck.
More from ptn1411/skill
All 22 skills in this repoAndroid APK Pentester
ptn1411/skill
Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.
Electron App Security Analyzer
ptn1411/skill
Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.
Electron Builder Unpacker
ptn1411/skill
Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.
Javascript Deobfuscator
ptn1411/skill
Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.
Web App Scanner
ptn1411/skill
Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…
Dotnet Decompiler
ptn1411/skill
Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.
Related
Categories
Questions about Authorized Artifact Auditor
What does Authorized Artifact Auditor do?
A skill your agent uses when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation. Authorized Artifact Auditor is an agent skill from ptn1411/skill. Use when analyzing owned or authorized software artifacts for source recovery, architecture mapping, security auditing, dependency review, and defensive remediation.
When should I use Authorized Artifact Auditor?
Authorized Artifact Auditor fits situations like: analyzing owned; authorized software artifacts for source recovery; architecture mapping; security auditing.
How do I install Authorized Artifact Auditor in Claude Code?
Run `npx skills add ptn1411/skill --skill authorized-artifact-auditor -a claude-code`. Or copy the skill folder (the ptn1411/skill repository) into .claude/skills/authorized-artifact-auditor in your project. Claude Code loads it when a task matches its description.
How do I install Authorized Artifact Auditor in Codex?
Run `npx skills add ptn1411/skill --skill authorized-artifact-auditor -a codex`. Or copy the skill folder (the ptn1411/skill repository) into .agents/skills/authorized-artifact-auditor in your project. Codex loads it when a task matches its description.
Can I use Authorized Artifact Auditor in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill authorized-artifact-auditor -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/authorized-artifact-auditor, .gemini/skills/authorized-artifact-auditor, .github/skills/authorized-artifact-auditor and .opencode/skills/authorized-artifact-auditor in your project.
What does Authorized Artifact Auditor need to run?
Going by SKILL.md and its folder, Authorized Artifact Auditor needs Python for the scripts in its folder and the command-line tools its instructions call (python). Our summary lists: Python 3.
Does Authorized Artifact Auditor access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Authorized Artifact Auditor safe to install?
Our automated static check of SKILL.md flagged 1 warning(s): contains zero-width characters. Read the flagged lines before installing; the check is not a guarantee either way. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Authorized Artifact Auditor use?
No licence was found for Authorized Artifact Auditor or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Authorized Artifact Auditor use?
About 3.3k tokens (SKILL.md is roughly 13k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Authorized Artifact Auditor?
Skills that share tags, products or a category with Authorized Artifact Auditor: Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Skill Scanner (getsentry/skills, 1k stars), Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 481 stars) and Security Alert Triage (elastic/agent-skills, 592 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Authorized Artifact Auditor?
ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 219 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.
Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.