secskills
secskills is a Penetration testing & red team skill for AI agents, published by bingook in the bingo repository on GitHub. Skillspace rates secskills F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
渗透测试实战技能 v2.0.0。覆盖信息收集、漏洞发现 (19 类别)、漏洞利用、后渗透、免杀全流程。 所有漏洞输出必须附带可复现的验证请求（完整curl命令），用户需在Burp中自行验证。 未核实的漏洞禁止作为正式漏洞输出。JS硬编码/未授权/敏感信息必须输出完整路径+行号。 智能授权检测: 目标含"test/dev"或用户提供凭据 → 自动设为"企业test环境-已授权"模式，零交互直接测试。 当用户给出具体目标 (IP/域名/URL) 且意图是攻击/利用/拿权限时触发。 不触发: 概念讨论、蓝队防御、代码审计、CVE文档查询。
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 295
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 76 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- Critical-risk patterns
- License
- Not declared. Check the repository before reusing it.
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- reverse shell
- accesses sensitive system files
- dynamic code execution (eval/exec)
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.