Securing Systems
Security engineering router for authorized assessments and defensive engineering. Covers penetration testing, code auditing, red/blue/purple team operations, threat intelligence, and vulnerability research. For specialized application security, cloud security, detection engineering, or security architecture, route to dedicated skills (defending-applications, securing-cloud-and-supply-chain, detec…
Install
$ agentstack add skill-telagod-code-abyss-securing-systems ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-telagod-code-abyss-securing-systems) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
攻防秘典
> 安全工程总路由：通用攻防视角与红队 / 蓝队 / 紫队基础知识。 > 专域工作（应用安全防御、云原生加固、检测工程、安全架构）走专门 skill。 > 信级：项目文件 > 标准库 > 训练记忆（标 [unverified]）
路由
攻防基础（本 skill 内）
| 意图 | 秘典 | 核心 | |------|------|------| | 渗透测试 | [pentest](references/pentest.md) | Web/API/内网、OWASP、BOLA、JWT、GraphQL | | 代码审计 | [code-audit](references/code-audit.md) | 危险函数、污点追踪、Source→Sink | | 红队攻击 | [red-team](references/red-team.md) | PoC、C2、横移、免杀、供应链 | | 蓝队防御 | [blue-team](references/blue-team.md) | 检测、SOC、IR、取证、密钥轮换 | | 威胁情报 | [threat-intel](references/threat-intel.md) | OSINT、威胁狩猎、ATT&CK 建模 | | 漏洞研究 | [vuln-research](references/vuln-research.md) | 逆向、Exploit、Fuzzing、PWN |
专域路由（其他 skill）
| 意图 | 走 skill | 适用 | |------|---------|------| | 应用层防御（XSS / SQLi / OAuth / LLM AppSec） | [defending-applications](../defending-applications/SKILL.md) | 写代码 / 修 CVE / 鉴权设计 | | 云原生 + 供应链加固 | [securing-cloud-and-supply-chain](../securing-cloud-and-supply-chain/SKILL.md) | K8s / CI/CD / SLSA / 云 IAM | | 检测工程 + 蓝紫队 | [detecting-and-responding](../detecting-and-responding/SKILL.md) | Sigma / EDR / IR / 威胁狩猎 | | 安全架构 + 合规 + 身份 | [architecting-security](../architecting-security/SKILL.md) | 威胁建模 / 零信任 / SOC2/PCI |
执行链
攻：侦察 → 武器化 → 投递 → 利用 → 安装 → C2 → 行动
守：预防 → 检测 → 响应 → 恢复
紫队：ATT&CK → 红攻 → 蓝检 → 缺口 → 闭环输出约束
- 安全测试代码输出须标注使用场景（Security Testing / Defense Validation / Security Research）
- 涉及真实 IP / 域名时使用 RFC 5737 保留地址（
192.0.2.0/24、198.51.100.0/24）或example.com - 凭证、密钥、Token 一律使用占位符（`
、`） - 不生成针对特定未授权目标的定制攻击代码
- 优先输出防御视角：每个攻击技术附带检测 / 缓解建议
- 涉及云端写入、生产环境、凭据、远程 push/PR、CI/CD 权限或基础设施变更前，必须先确认范围和授权
优先级
| 场景 | 排序 | |------|------| | 攻击模拟 | 效果 > 精准 > 控制 | | 防御响应 | 正确 > 覆盖 > 速度 | | 紧急事件 | 速度 > 正确 > 简洁 |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: telagod
- Source: telagod/code-abyss
- License: MIT
- Homepage: https://www.npmjs.com/package/code-abyss
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.