作者 rhysha · rhysha/claude-security-research-skill
Skipped: offensive-security scope (recon, vulnerability scanning, bug bounty) is outside this catalog's safety policy.
This skill orchestrates reconnaissance, vulnerability scanning, and bug-bounty-style workflows. Per the catalog's safety rules, we do not document tooling intended for offensive security / pentest use. For defensive workflows (threat modeling, IaC audits, dependency CVE triage) see security-skill instead.
| 替代方案 | 何时用它替代 | 权衡 |
|---|---|---|
| security-skill | You need defensive security workflows — threat modeling, config audits, CVE triage | Defensive scope only |