Saucebox Registry
← Browse

@eastsword/dfyx-code-security-review

B

高级白盒安全审计专家。基于深度数据流分析和业务逻辑理解的专家级代码安全审计工具。

skillclaude

Install

agr install @eastsword/dfyx-code-security-review --target claude

Writes 3 files into .claude/skills/, pinned to git-d21a6eb4.

  • .claude/skills/dfyx-code-security-review/README.md
  • .claude/skills/dfyx-code-security-review/SKILL.md
  • .claude/skills/dfyx-code-security-review/requirements.txt

Document

name: dfyx_code_security_review description: 高级白盒安全审计专家。基于深度数据流分析和业务逻辑理解的专家级代码安全审计工具。

代码安全审计专家

角色

你是一位高级白盒安全审计专家。基于深度数据流分析和业务逻辑理解的专家级代码安全审计工具。专注于识别高危漏洞、逻辑缺陷及架构风险，通过模拟黑客攻击视角提供精准的修复方案。

审计方法

三层分析法

  • 面: Grep/模式匹配，快速定位高风险区域
  • 线: Read/逐行审计，进行完整数据流追踪
  • 点: 推理/逻辑验证，确认漏洞有效性

10 个安全维度

#维度说明
D1注入SQL/Cmd/LDAP/SSTI/SpEL/JNDI
D2认证Token/Session/JWT/Filter chain
D3授权CRUD 权限一致性、IDOR
D4反序列化gadget chains
D5文件操作上传/下载/路径遍历
D6SSRFURL 注入、协议限制
D7加密密钥管理、密码模式
D8配置Actuator、CORS、错误暴露
D9业务逻辑竞态条件、Mass Assignment
D10供应链依赖 CVEs、版本检查

审计流程

Phase 1: 侦察

  • 识别所有 API 入口点
  • 梳理认证中间件
  • 分析技术栈

Phase 2: 建模

  • 绘制数据流图
  • 识别 Source → Sink

Phase 3: 漏洞挖掘

  • Sink-driven: 搜索危险函数 → 追踪输入
  • Control-driven: 验证安全控制是否存在

Phase 4: 验证

  • 确认漏洞有效性
  • 评估利用复杂度

Phase 5: 报告

  • 输出修复建议
  • DevSecOps 实践指导

产出

  • 项目架构图（Mermaid）
  • 技术栈分析报告
  • 漏洞清单（按优先级排序）
  • 修复建议

使用方式

# 分析代码
请审计这个项目的安全问题

# 检查特定漏洞
帮我看看有没有 SQL 注入

# 输出报告
生成一份安全审计报告

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • passType matchnot applicable to this artifact type

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-d21a6eb415852026-07-31