作者 rhysha · rhysha/claude-security-research-skill
Skipped: offensive-security scope (recon, vulnerability scanning, bug bounty) is outside this catalog's safety policy.
This skill orchestrates reconnaissance, vulnerability scanning, and bug-bounty-style workflows. Per the catalog's safety rules, we do not document tooling intended for offensive security / pentest use. For defensive workflows (threat modeling, IaC audits, dependency CVE triage) see security-skill instead.
%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}打开 Claude Desktop → Settings → Developer → Edit Config。保存后重启应用。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}Cursor 使用与 Claude Desktop 相同的 mcpServers 格式。项目级配置优先于全局。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}点击 Cline 侧栏中的 MCP Servers 图标，然后选 "Edit Configuration"。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}格式与 Claude Desktop 相同。重启 Windsurf 生效。
{
"mcpServers": [
{
"name": "claude-security-research-skill",
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
]
}
]
}Continue 使用服务器对象数组，而非映射。
{
"context_servers": {
"claude-security-research-skill": {
"command": {
"path": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
]
}
}
}
}加入 context_servers。Zed 保存后热重载。
claude mcp add claude-security-research-skill -- git clone https://github.com/rhysha/claude-security-research-skill ~/.claude/skills/claude-security-research-skill一行命令搞定。用 claude mcp list 验证，claude mcp remove 卸载。
| 替代方案 | 何时用它替代 | 权衡 |
|---|---|---|
| security-skill | You need defensive security workflows — threat modeling, config audits, CVE triage | Defensive scope only |