cyberedge-report-findings

@symph0nia · 收录于 5 天前 · 上游提交 6 天前

Report and query evidence-backed security findings from authorized CyberEdge Tasks. Use for versioned scanner adapters that classify existing Observations, never for arbitrary command or PoC execution.

场景安全审计漏洞报告

适合你，如果你需要记录和查询授权安全测试中的发现

/ 下载安装

https://github.com/symph0nia/cyberedge/tree/main/skills/cyberedge-report-findings ↗

/ 通过 npx 安装 校验哈希

npx oh-my-skill add symph0nia/cyberedge/cyberedge-report-findings

/ 通过 bash 安装

curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- symph0nia/cyberedge/cyberedge-report-findings

/ 已经装过?验证本机副本,不用重装

npx oh-my-skill verify symph0nia/cyberedge/cyberedge-report-findings

安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。

606GitHub stars

~290最小装载

~290含声明引用

~388文本包总量

索引托管

怎么用

商店整理自技能原文 · 版本 0af016f · 表述以原文为准

它做什么

装好后，Claude 可以报告来自授权 CyberEdge 任务的、基于证据的安全发现，并查询已有发现。它只操作有证据支持的观察，不执行命令或修改范围。

什么时候触发

当用户需要根据已完成或运行中任务中的观测记录来报告安全发现时触发。通常是在安全扫描后，需要将观测分类为发现时。

装好后可以这样说

创建一个新发现或刷新已有发现

返回发现列表

使用search_findings功能

技能原文 SKILL.md作者撰写 · Apache-2.0 · 0af016f

CyberEdge Report Findings

Use cyberedge-agent. This bridge is machine-only.

Evidence boundary

Report only against a running or completed Task.
Reference an Observation belonging to that exact Task. The server derives Asset and Evidence IDs; never invent them.
Use a stable detector name, versioned rule ID, and deterministic fingerprint.
Severity is 1=INFO, 2=LOW, 3=MEDIUM, 4=HIGH, or 5=CRITICAL.
Do not execute commands, upload templates, edit PoCs, or widen Scope through this Skill.

The server deduplicates by Scope, detector, rule, Asset, and fingerprint. A repeated observation refreshes the existing Finding instead of creating noise.

{"request_id":"req-1","idempotency_key":"idem-1","agent_id":"codex-main","skill_name":"cyberedge-report-findings","skill_version":"0.1.0","action":"report_finding","task_id":"task-id","observation_id":"observation-id","detector":"adapter-name","rule_id":"rule-id","title":"Finding title","description":"Evidence-backed description","severity":3,"fingerprint":"stable-fingerprint"}

Use search_findings with scope_id for the resulting read model and get_task_report for the complete Evidence chain.

按 Apache-2.0 许可原样转载,未经改动 · 在 GitHub 查看 →

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。

…