作者 rhysha · rhysha/claude-security-research-skill
已略過：進攻性安全範疇（偵察、漏洞掃描、漏洞獎勵）不在本目錄的安全政策範圍內。
此技能負責協調偵察、漏洞掃描及漏洞獎勵式工作流程。根據目錄的安全規則，我們不記錄用於進攻性安全／滲透測試的工具。如需防禦性工作流程（威脅建模、IaC 稽核、相依套件 CVE 分類），請參閱 security-skill。
%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}開啟 Claude Desktop → Settings → Developer → Edit Config。儲存後重啟應用。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}Cursor 使用與 Claude Desktop 相同的 mcpServers 格式。專案級設定優先於全域。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}點擊 Cline 側欄中的 MCP Servers 圖示，然後選 "Edit Configuration"。
{
"mcpServers": {
"claude-security-research-skill": {
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
],
"_inferred": true
}
}
}格式與 Claude Desktop 相同。重啟 Windsurf 生效。
{
"mcpServers": [
{
"name": "claude-security-research-skill",
"command": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
]
}
]
}Continue 使用伺服器物件陣列，而非映射。
{
"context_servers": {
"claude-security-research-skill": {
"command": {
"path": "git",
"args": [
"clone",
"https://github.com/rhysha/claude-security-research-skill",
"~/.claude/skills/claude-security-research-skill"
]
}
}
}
}加入 context_servers。Zed 儲存後熱重載。
claude mcp add claude-security-research-skill -- git clone https://github.com/rhysha/claude-security-research-skill ~/.claude/skills/claude-security-research-skill一行命令搞定。用 claude mcp list 驗證，claude mcp remove 移除。
| 替代方案 | 何時用它替代 | 權衡 |
|---|---|---|
| security-skill | 當您需要防禦性安全工作流程時，例如威脅建模、設定稽核、CVE 分類 | 僅限防禦性範疇 |