agentleFS
Sign inStart free
adeahejshshshadeahejshshsh/coldbrew-dsh/skills/cha-apicloud/SKILL.md

cha-apicloud

Skill12 starsChanged 20 days agoMITView on GitHub

接口云端与代码安全：API GraphQL WebSocket JWT OAuth Docker Kubernetes 云权限 源码审计 依赖 供应链 fuzz 业务逻辑

The file

Create a free account to mount
Files
SKILL.md

接口云端与代码安全

关键词：API GraphQL WebSocket JWT OAuth Docker Kubernetes 云权限 源码审计 依赖 供应链 fuzz 业务逻辑

第一步 描口

画出端点、鉴权头、JWT/OAuth 流转、容器与云权限面。用户给的 TOKEN 字段保持原名。

第二步 拧阀

对参数、重放、越权序、依赖和供应链做可复现试压。模糊输入写具体 corpus 形态。

第三步 列表

编号写出问题、复现步骤、影响面、修补点。只谈代码和配置，不改工单主语。

收口：当前:对象 / 结果 / 下一步

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free