Agent skill

Aboutsecurity Content Ingestion

by wgpsec in wgpsec/AboutSecurity

A skill your agent uses whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such…

No licenceAuto-check passedWriting & Content

Install Aboutsecurity Content Ingestion

skills CLI
$ npx skills add wgpsec/AboutSecurity --skill aboutsecurity-content-ingestion -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install wgpsec/AboutSecurity aboutsecurity-content-ingestion --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/wgpsec/AboutSecurity.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/aboutsecurity-content-ingestion .claude/skills/aboutsecurity-content-ingestion && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
aboutsecurity-content-ingestion
GitHub stars
1.8k
Token cost
~1.4k tokens
SKILL.md length
247 words
Files
2
Skills in repo
64
Repo updated
First seen
Licence
None found

At a glance

A skill your agent uses whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such…

  • Works in 7 steps: 建立项目上下文 → 理解输入资源 → 决定落点 → …
  • The user asks to add
  • SKILL.md covers 工作原则, Phase 1: 建立项目上下文, Phase 2: 理解输入资源 and Phase 3: 决定落点, plus 5 more sections
  • Calls git

What it does

Aboutsecurity Content Ingestion is an agent skill from wgpsec/AboutSecurity. Use this skill whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such as InternalAllTheThings, blog posts, tools, docs, PRs, screenshots, notes, or URLs. This skill SOPs the full workflow: first analyze the AboutSecurity structure and contribution rules, then understand and decompose the source material, decide what belongs in which skill/reference file, verify claims to avoid fabricated content…

Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `evals/evals.json`).

It sits in Writing & Content, covering Operations and SOPs, Code review and Blog and article writing. It works with Git. The repository describes itself as: Everything for pentest. | 渗透测试知识库,以 AI Agent 可执行的格式沉淀安全方法论。

When your agent uses it

  • The user asks to add
  • Extract security knowledge into the AboutSecurity repository from any external resource such as InternalAllTheThings
  • Even if the user only says 把这个资料加到 AboutSecurity
  • 按 AboutSecurity 风格整理

Example prompts

  • “把这个资料加到 AboutSecurity”
  • “更新 skill”
  • “吸收这些内容”
  • “/aboutsecurity-content-ingestion”

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. 建立项目上下文
  2. 理解输入资源
  3. 决定落点
  4. 提取与改写
  5. 验证真实性
  6. 实施修改
  7. 复核 diff

What it can do on your machine

Read from SKILL.md and the folder at commit 914ffb5. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Aboutsecurity Content Ingestion loads about 1.4k tokens when it runs. Until then it costs about 190 tokens; SKILL.md has 247 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~190
When it runs · the whole SKILL.md, loaded when a task matches
~1.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 247 words (~1,403 tokens).

“这个 skill 用于把外部安全资料转化为 AboutSecurity 仓库中的高质量 skill/reference 内容。目标不是“搬运全文”,而是把可信、可复用、符合项目结构的方法论沉淀到正确位置。”

— opening of SKILL.md by wgpsec
name
aboutsecurity-content-ingestion
metadata
tags: "AboutSecurity, skill update, content ingestion, knowledge base, SOP, 内容吸收, 知识库更新, 技能维护" category: "project-workflow"

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in .claude/skills/aboutsecurity-content-ingestion of wgpsec/AboutSecurity.

  • SKILL.md
  • evals/evals.json

Open the folder on GitHubat commit 914ffb5

Compare with similar skills

Aboutsecurity Content Ingestion next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Aboutsecurity Content Ingestion compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Aboutsecurity Content Ingestion this skillwgpsec/AboutSecurity1.8k—~1.4kAutomated safety check: PassNone
Eight-Part Company Deep DiveHKUDS/Vibe-Trading35k—~2.4kAutomated safety check: PassMIT
Blog Draft Workflowluongnv89/claude-howto42k—~1.1kAutomated safety check: PassMIT
Create ArticleAbilityai/cornelius109—~3kAutomated safety check: NotesMIT
Blog FactcheckAgriciDaniel/claude-blog2.3k—~2.2kAutomated safety check: PassMIT
Agentsop Aideragentsope/SkillAlchemy436—~3.5kAutomated safety check: PassMIT

Similar skills

  • Plans and drafts an eight-part, roughly 120k-word investigative series on one company, built around a strict fact-check pass rather than fast drafting.

    35k GitHub stars~2.4k tokensUpdated yesterday
    Writing & ContentAuto-check passed
  • Blog Draft Workflow

    luongnv89/claude-howto

    Walks through writing a blog post from an idea and source material: research, brainstorming, outline approval, versioned drafts and optional git commits.

    42k GitHub stars~1.1k tokensUpdated 10 days ago
    Writing & ContentAuto-check passed
  • Create Article

    Abilityai/cornelius

    Create long-form articles from knowledge base insights. An agent skill from Abilityai/cornelius.

    109 GitHub stars~3k tokensUpdated 2 days ago
    Writing & ContentAuto-check: notes
  • Blog Factcheck

    AgriciDaniel/claude-blog

    Verify statistics and claims in blog posts by fetching cited source URLs and checking if the claimed data actually appears on the page.

    2.3k GitHub stars~2.2k tokensUpdated yesterday
    Writing & ContentAuto-check passed
  • Agentsop Aider

    agentsope/SkillAlchemy

    SOP for terminal-based, git-native AI pair programming with Aider (git work-tree + tree-sitter repo-map + edit-format + human-in-loop REPL).

    436 GitHub stars~3.5k tokensUpdated yesterday
    DevelopmentAuto-check passed
  • Handover

    k1ein-chen/Harness-Starter

    将当前会话中的技术决策、运维流程或阶段性研发进展,归档为标准工程文档(ADR / SOP / Handover),并自动更新模块内的 README 归档索引。

    119 GitHub stars~752 tokensUpdated 16 days ago
    DevelopmentAuto-check passed

More from wgpsec/AboutSecurity

All 64 skills in this repo
  • Ad Persistence

    wgpsec/AboutSecurity

    AD 域环境持久化技术。当已获取域管/本地管理员权限、需要建立持久访问以确保重启或密码更改后仍能回到目标环境时使用。覆盖主机级持久化(计划任务/注册表Run/COM劫持/WMI事件订阅/Windows服务/启动文件夹)、域级持久化(Golden Ticket/Silver Ticket/Skeleton…

    1.8k GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • Apt Emulation

    wgpsec/AboutSecurity

    APT 模拟与情报驱动红队方法论。基于已知 APT 组织的 TTP(MITRE ATT&CK)设计红队行动计划。当需要模拟特定威胁组织、设计高仿真攻击演练、或根据威胁情报制定攻击策略时使用

    1.8k GitHub stars~922 tokensUpdated today
    Auto-check passed
  • Argocd Tactics

    wgpsec/AboutSecurity

    ArgoCD 后渗透方法论:Redis缓存投毒集群接管、SSO认证绕过、未授权API枚举、恶意Application部署、Webhook SSRF、默认凭据利用。

    1.8k GitHub stars~510 tokensUpdated today
    Auto-check passed
  • C2 Beacon Analysis

    wgpsec/AboutSecurity

    C2 Beacon 配置提取与分析。当捕获到 Cobalt Strike/Sliver/Havoc 等 C2 框架的 Beacon 样本、内存 dump、或网络流量时使用。提取 C2 地址、通信协议、Malleable Profile、Watermark 等关键情报。红队视角:了解蓝队如何从 Beacon 提取 IOC 以改进 C2 OPSEC

    1.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • C2 Evasion Methodology

    wgpsec/AboutSecurity

    C2框架免杀方法论:分析 C2 源码、搜索检测规则(YARA/Sigma/Snort)、逐规则分析、修改源码绕过检测。当遇到 YARA/Sigma/Snort 规则触发告警、beacon/implant 被杀软检测到时使用。第一步:确认 implant/beacon 语言和架构;第二步:搜索对应检测规则并逐规则分析修改

    1.8k GitHub stars~557 tokensUpdated today
    Auto-check passed
  • Ctf AI ML

    wgpsec/AboutSecurity

    CTF AI/ML 攻击技术。当挑战涉及 AI 模型攻击、对抗样本生成、模型提取、Prompt 注入/越狱、LoRA 权重操纵、LLM Token 走私、成员推理攻击、训练数据投毒、神经网络分析时使用。覆盖 FGSM/PGD/C&W 对抗攻击、模型反演、模型权重扰动还原、LLM 工具链劫持、上下文窗口操纵等 AI 安全全链路攻防技术

    1.8k GitHub stars~533 tokensUpdated today
    Auto-check passed

Works with

Questions about Aboutsecurity Content Ingestion

What does Aboutsecurity Content Ingestion do?

A skill your agent uses whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such…. Aboutsecurity Content Ingestion is an agent skill from wgpsec/AboutSecurity. Use this skill whenever the user asks to add, absorb, migrate, port, update, merge, compare, or extract security knowledge into the AboutSecurity repository from any external resource such as InternalAllTheThings, blog posts, tools, docs, PRs, screenshots, notes, or URLs.

When should I use Aboutsecurity Content Ingestion?

Aboutsecurity Content Ingestion fits situations like: the user asks to add; extract security knowledge into the AboutSecurity repository from any external resource such as InternalAllTheThings; even if the user only says 把这个资料加到 AboutSecurity; 按 AboutSecurity 风格整理.

How do I install Aboutsecurity Content Ingestion in Claude Code?

Run `npx skills add wgpsec/AboutSecurity --skill aboutsecurity-content-ingestion -a claude-code`. Or copy the skill folder (.claude/skills/aboutsecurity-content-ingestion in wgpsec/AboutSecurity) into .claude/skills/aboutsecurity-content-ingestion in your project. Claude Code loads it when a task matches its description.

How do I install Aboutsecurity Content Ingestion in Codex?

Run `npx skills add wgpsec/AboutSecurity --skill aboutsecurity-content-ingestion -a codex`. Or copy the skill folder (.claude/skills/aboutsecurity-content-ingestion in wgpsec/AboutSecurity) into .agents/skills/aboutsecurity-content-ingestion in your project. Codex loads it when a task matches its description.

Can I use Aboutsecurity Content Ingestion in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add wgpsec/AboutSecurity --skill aboutsecurity-content-ingestion -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/aboutsecurity-content-ingestion, .gemini/skills/aboutsecurity-content-ingestion, .github/skills/aboutsecurity-content-ingestion and .opencode/skills/aboutsecurity-content-ingestion in your project.

What does Aboutsecurity Content Ingestion need to run?

Going by SKILL.md and its folder, Aboutsecurity Content Ingestion needs the command-line tools its instructions call (git).

Does Aboutsecurity Content Ingestion access the network?

SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Aboutsecurity Content Ingestion safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Aboutsecurity Content Ingestion use?

No licence was found for Aboutsecurity Content Ingestion or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Aboutsecurity Content Ingestion use?

About 1.4k tokens (SKILL.md is roughly 5.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Aboutsecurity Content Ingestion?

Skills that share tags, products or a category with Aboutsecurity Content Ingestion: Eight-Part Company Deep Dive (HKUDS/Vibe-Trading, 35k stars), Blog Draft Workflow (luongnv89/claude-howto, 42k stars), Create Article (Abilityai/cornelius, 109 stars) and Blog Factcheck (AgriciDaniel/claude-blog, 2.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Aboutsecurity Content Ingestion?

wgpsec (a GitHub organization) maintains it in wgpsec/AboutSecurity, which has 1,778 GitHub stars. The repository holds 64 skills in this directory. The repository was last updated on October 10, 2026.

Source: wgpsec/AboutSecurity on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.