vlad/reverse-skills-max
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reverse-skills-max: initial public release (restored, redacted, hardened)

Browse Source
This commit is contained in:
baradok609hecl1pq6qi
2026-10-20 02:17:15 +03:00
commit da24c2bd20
2227 changed files with 443931 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
reverse-skill-repo/skills/code-audit/references/sast-review-checklist.md Normal file
View File

@@ -0,0 +1,10 @@
# 代码审计清单（精简）
- [ ] 所有外部输入入口列表
- [ ] 鉴权/鉴权中间件覆盖
- [ ] 多租户 ID 是否绑定会话
- [ ] 反序列化 / pickle / YAML load
- [ ] SSRF 出网与协议限制
- [ ] 密钥与 token 存储
- [ ] 文件上传路径与类型
- [ ] 危险 exec/system/Runtime