Scanners-Box 每日 AI 工具推荐 Scanners-Box Daily AI Tool Picks
Agent 技能：漏洞发现与修复 Agent Skills for Vulnerability Discovery & Remediation
共 1 个工具 · 专栏不定期更新 1 tools · new issues as they're written
把「找漏洞 + 修漏洞」写成 agent 能直接跑的技能：分阶段编排，复核 findings 的那个 agent 永远不是提出它的同一个。目前一条，往后陆续补。Discovery and remediation written as a skill an agent can run: staged orchestration, and the agent that verifies a finding is never the one that raised it. One entry so far; more as they ship.
Cloudflare security-audit-skill
Cloudflare security-audit-skill
第 017 期 · 2026.10.7
No. 17 · Oct 7, 2026
第 017 期 · 2026.10.7
No. 17 · Oct 7, 2026
Cloudflare 官方的 coding-agent skill：6 阶段编排，查 findings 的 agent 永远不是发现它的那个 agent Cloudflare's official coding-agent skill: a six-phase orchestration where the agent verifying a finding is never the agent that found it
侦察 → 覆盖驱动狩猎 → 候选验证 → 结构化输出 → 独立记录验证 → 中立报告；官方自己写进 README「单次运行只找到重复运行能找到的漏洞的一半」。短板：22.6k star 只有 14 次提交、MIT 但维护节奏存疑、效果强依赖宿主 agent 的模型与权限。
Recon → coverage-driven hunting → candidate validation → structured output → independent record verification → neutral reporting; the README itself states a single run finds only half of what repeated runs find. Caveats: 22.6k stars on just 14 commits, MIT but an uncertain maintenance cadence, and effectiveness depends heavily on the host agent's model and permissions.
https://github.com/cloudflare/security-audit-skill
其他分类Other categories
AI-Generated Code Security EvaluationAI-Generated Code Security Evaluation AI 基础设施攻击面发现AI Infrastructure Attack Surface Discovery AI 红队测试框架与 AgentAI Red Teaming Frameworks & Agents AI 安全验证标准与规范AI Security Verification Standards AI 智能体运行时管控AI Agent Runtime Controls Agent 工作流安全工具箱Security Toolkits for Agentic Workflows AI 智能体与应用安全审计Security Auditing for AI Agents & Apps Agent Skills 安全审计Security Auditing for Agent Skills LLM 驱动的漏洞扫描器LLM-Powered Vulnerability Scanners