opencode-skills-collection 4.0.43 → 4.0.45

package/bundled-skills/case-review/SKILL.md

@@ -0,0 +1,167 @@
+---
+name: case-review
+description: "Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes."
+risk: safe
+source: "https://github.com/zhaoxuya520/reverse-skill"
+source_repo: "zhaoxuya520/reverse-skill"
+source_type: community
+date_added: "2026-08-25"
+license: "MIT"
+license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
+---
+# Evidence Graph Review
+## When to Use
+
+- Before delivering an analysis report, verify traceability and completeness.
+- Auditing whether conclusions are backed by recorded evidence.
+
+
+Use this skill when a reverse engineering, forensics, CTF, or authorized security case needs a defensible handoff. It audits the existing `work/<case>/` package without changing the case or touching a target.
+
+## Scope
+
+This skill covers:
+
+- Scope metadata and target-activity readiness
+- Evidence record structure and reproducibility fields
+- References from work items and timeline entries to Evidence
+- Structured Findings and Paths in report Markdown
+- Optional SHA-256 verification for case-local artifacts
+- A Markdown or JSON review result for a report handoff
+
+It MUST NOT perform reconnaissance, exploitation, dynamic instrumentation, or target changes. Those actions belong to the routed analysis skill and require the case scope gate.
+
+## Tool dependencies
+
+| Tool | Required | Purpose | Auto-bootstrap |
+|------|----------|---------|---------------|
+| Python 3.9+ | Yes | Runs the read-only case review script | No, use the platform Python installation |
+
+No network access or third-party package is required.
+
+## Workflow
+
+### Phase 1: Intake
+
+Run the review against the existing case directory:
+
+```bash
+python3 skills/case-review/scripts/review_case.py work/<case> --format markdown
+```
+
+Confirm that `scope.md`, `timeline.md`, `workitems.md`, and `evidence/` are present. A non-strict review reports scope warnings while a strict review treats warnings as handoff blockers.
+
+## 建议下一步（选一个编号）
+
+1. 修复 scope.md 中的授权、范围或 network_profile 字段
+2. 继续检查 Evidence 记录的可复现命令和来源
+3. 导出当前 review 结果并附到阶段性报告
+4. 换 JSON 输出接入 CI 或其他审查工具
+5. 暂停，先确认审查范围
+
+### Phase 2: Traceability
+
+Review the checks for:
+
+- Evidence IDs that do not exist
+- Findings without `evidence_ids`
+- Paths without an allowed `path_type` or Evidence reference
+- Work items and timeline entries pointing to unknown Evidence
+- Unlinked Evidence records
+- Validated Findings with low confidence
+
+An offline observation may use `repro_command: n/a` only when its `notes` field explicitly documents the offline limitation.
+
+Use JSON when another tool needs stable fields:
+
+```bash
+python3 skills/case-review/scripts/review_case.py work/<case> --format json
+```
+
+## 建议下一步（选一个编号）
+
+1. 补写缺失的 Evidence，并保留原始命令
+2. 将候选 Finding 绑定到 Evidence 后重新审查
+3. 为调用链或攻击链补充 P-id 和 Path 步骤
+4. 生成 Markdown handoff summary
+5. 换回 PRIMARY skill 继续分析
+
+### Phase 3: Fixity verification
+
+When an Evidence record contains both `content_hash` and `artifact_path`, verify the case-local artifact:
+
+```bash
+python3 skills/case-review/scripts/review_case.py work/<case> --verify-hashes --strict
+```
+
+The script accepts `sha256:<64 hex characters>` and checks that the artifact remains inside the case root. A hash mismatch is a hard failure.
+
+The PowerShell Evidence helper can record a hash while appending a record:
+
+```powershell
+powershell -File skills/scripts/append-evidence.ps1 -CaseRoot work\<case> -Id E-001 -Title "Sample hash" -ReproCommand "sha256sum evidence/sample.bin" -ArtifactPath "evidence\sample.bin"
+```
+
+## 建议下一步（选一个编号）
+
+1. 修复 hash mismatch 或替换已污染的工作副本
+2. 为未固定的原始文件补充 SHA-256 和 artifact_path
+3. 继续进入报告生成阶段
+4. 导出 JSON 结果供 CI 保存
+5. 暂停并请求人工复核
+
+### Phase 4: Handoff
+
+Use strict mode before a final report or specialist handoff:
+
+```bash
+python3 skills/case-review/scripts/review_case.py work/<case> --strict --format markdown > work/<case>/report/case-review.md
+```
+
+The command is read-only with respect to the case unless shell redirection is explicitly used to save its output. The review is not legal advice and does not replace organizational evidence handling procedures.
+
+## 建议下一步（选一个编号）
+
+1. 将通过的 review 结果交给 `docs-generator/` 生成正式报告
+2. 回到 PRIMARY skill 补齐新的分析证据
+3. 归档 Markdown 和 JSON review 结果
+4. 暂停并请求人工复核
+
+## Language behavior contract
+
+- Internal reasoning, tool selection, and phase control: English.
+- User-visible messages, section labels, reports, and next-step menus: Chinese unless the user requests another language.
+- Default bilingual labels place Chinese first and English second, separated by `/`.
+
+## Bootstrap boundary
+
+This skill has no third-party dependency. If Python 3 is unavailable, the only allowed recovery action is the repository bootstrap path when a Python capability is registered for the current platform. If no such capability is registered, stop and report the missing runtime. Do not guess executable paths, download packages, or perform a manual install from inside this skill.
+
+## Routing context
+
+**Upstream entry**: any reverse, forensics, CTF, or authorized security skill that has produced a case package.
+
+**Downstream exit**: `docs-generator/` for a formal report, or the original PRIMARY skill when the graph is incomplete.
+
+**Related modules**: `ops/evidence-finding-path.md`, `ops/timeline-workitem.md`, `digital-forensics/`, `reverse-engineering/`, and `docs-generator/`.
+
+## References
+
+- [NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response](https://csrc.nist.gov/pubs/sp/800/86/final)
+- [SWGDE Best Practices for Computer Forensic Acquisitions](https://www.swgde.org/documents/published-complete-listing/17-f-002-2-1/)
+- [SWGDE Best Practices for Archiving Digital and Multimedia Evidence](https://www.swgde.org/documents/published-complete-listing/19-f-003-best-practices-for-archiving-digital-and-multimedia-evidence/)
+
+## 任务完成自检
+
+- [ ] 我是否审查了 scope.md、timeline.md、workitems.md 和 evidence/？
+- [ ] 所有 Finding 是否引用了现存 Evidence？
+- [ ] 所有 Path 是否包含合法 path_type 和 Evidence 引用？
+- [ ] 是否执行了 hash verification，或记录了未执行原因？
+- [ ] 是否以 strict 模式重新运行并保存了 review 结果？
+
+## Limitations
+
+- Expects a structured case layout (scope, evidence, findings); ad-hoc notes need pre-organization.
+- Reviews documentation quality, not the technical correctness of findings.
+
+> Adapted from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) (MIT).

package/bundled-skills/cloud-k8s/SKILL.md

@@ -0,0 +1,124 @@
+---
+name: cloud-k8s
+description: "Authorized cloud, container, and Kubernetes security assessment: metadata SSRF, IAM misconfiguration, container escape paths, and cluster RBAC review."
+risk: offensive
+source: "https://github.com/zhaoxuya520/reverse-skill"
+source_repo: "zhaoxuya520/reverse-skill"
+source_type: community
+date_added: "2026-08-25"
+license: "MIT"
+license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
+---
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
+# Cloud / Container / Kubernetes Security
+## When to Use
+
+- Assessing cloud workload or Kubernetes cluster security within an approved scope.
+- Reviewing IAM/RBAC configurations for privilege-escalation paths.
+
+
+## 适用场景
+
+- 云元数据 SSRF（169.254.169.254 / IMDS）
+- IAM 过度权限、公开存储桶、错误安全组
+- Docker/containerd 逃逸路径评估
+- Kubernetes RBAC、Secrets、Admission、供应链镜像
+- 容器镜像漏洞（可联动 `supply-chain-security/`）
+
+## 工作流
+
+### Phase 1 — 身份与边界
+
+```text
+□ 当前身份：云 AK/SK、K8s SA、节点 SSH？
+□ 范围：单账号 / 单 cluster / 单 namespace
+□ 网络档：authorized_target_only
+```
+
+### Phase 2 — 云控制面
+
+```bash
+# 示例（按厂商替换；MUST 在授权账号内）
+aws sts get-caller-identity
+aws s3 ls
+# Azure / GCP 对应 identity 命令
+```
+
+```text
+□ 公开桶 / 错误 ACL
+□ 元数据：IMDSv1 vs v2；SSRF 链
+□ 角色可扮演（PassRole）与横向
+```
+
+### Phase 3 — 容器
+
+```text
+□ 是否 privileged / hostPath / hostNetwork
+□ capabilities（SYS_ADMIN 等）
+□ 可写宿主机路径 → 逃逸候选
+□ 镜像历史与已知 CVE → Trivy
+```
+
+### Phase 4 — Kubernetes
+
+```bash
+kubectl auth can-i --list
+kubectl get pods,secrets,svc -A
+kubectl get clusterrolebindings
+```
+
+```text
+□ SA token 挂载与权限
+□ 危险 admission webhook 缺失
+□ etcd / dashboard 暴露
+□ 网络策略是否默认放行
+```
+
+## 工具链
+
+| 工具 | 用途 | 自举 |
+|------|------|------|
+| kubectl | 集群交互 | 手动 |
+| trivy | 镜像/IaC | bootstrap `trivy` 若可用 |
+| kube-bench / kubeaudit | CIS/配置 | 手动 |
+| pacu / scoutsuite | 云审计（授权） | 手动 |
+| nuclei | 已知云漏洞模板 | bootstrap nmap/nuclei 生态 |
+
+## 参考
+
+- `references/k8s-cloud-checklist.md`
+- CTF 对照：`../../CTF-Sandbox-Orchestrator/competition-agent-cloud/`
+- `../supply-chain-security/` `../pentest-tools/`
+
+## 路由上下文
+
+**上游**: MASTER R23  
+**下游**: 拿到节点 shell → `attack-chain` / `windows-ad`；镜像漏洞 → supply-chain  
+**MUST NOT**: 未授权扫公有云其他租户
+
+## 任务完成自检
+
+- [ ] 是否限定在授权账号/cluster？
+- [ ] 发现是否含复现与影响？
+- [ ] 是否避免破坏性操作？
+- [ ] 报告 / journal？
+
+## Limitations
+
+- Cloud provider API calls may incur cost and trigger alerts; coordinate with the owner.
+- Escape-path validation must stay inside disposable lab clusters.
+
+> Adapted from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) (MIT).

package/bundled-skills/cloud-k8s/references/k8s-cloud-checklist.md

@@ -0,0 +1,16 @@
+# Cloud / K8s 检查清单（精简）
+
+## IMDS
+- [ ] SSRF 是否可达 169.254.169.254
+- [ ] 是否强制 IMDSv2
+- [ ] 返回的 IAM 角色权限面
+
+## K8s 高危
+- [ ] cluster-admin 绑定过多
+- [ ] secrets 明文环境变量
+- [ ] privileged + hostPID/hostPath 组合
+- [ ] 匿名 auth / insecure apiserver 端口
+
+## 容器
+- [ ] 以 root 运行
+- [ ] 可加载内核模块 / docker.sock 挂载

package/bundled-skills/code-audit/SKILL.md

@@ -0,0 +1,92 @@
+---
+name: code-audit
+description: "Authorized source-code security review and SAST workflows: Semgrep and CodeQL pattern hunting, dangerous API identification, and fix verification."
+risk: safe
+source: "https://github.com/zhaoxuya520/reverse-skill"
+source_repo: "zhaoxuya520/reverse-skill"
+source_type: community
+date_added: "2026-08-25"
+license: "MIT"
+license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
+---
+# Source Code Security Audit
+## When to Use
+
+- Reviewing a codebase for security defects with static analysis.
+- Verifying that a vulnerability fix actually removes the flawed pattern.
+
+
+## 适用场景
+
+- 白盒审计、PR/差分安全审查
+- Semgrep / CodeQL / Bandit / gosec 等 SAST
+- 危险 API、注入点、鉴权缺失、加密误用
+- 与 `supply-chain-security/` 分工：本 skill 偏**自有代码逻辑**，供应链偏依赖与管道
+
+## 工作流
+
+### 1. 范围与威胁模型
+
+```text
+□ 信任边界：用户输入、文件、反序列化、SSRF、鉴权中间件
+□ 高价值资产：鉴权、支付、管理端、密钥处理
+```
+
+### 2. 自动扫描
+
+```bash
+semgrep --config auto .
+# 或项目规则包
+semgrep --config p/owasp-top-ten .
+```
+
+### 3. 人工验证（MUST）
+
+```text
+□ 每个 SAST 命中：可达性？可利用性？误报？
+□ 鉴权：IDOR/越权、缺校验、错误的多租户隔离
+□ 注入：SQL/命令/模板/LDAP
+□ 加密：硬编码密钥、ECB、自定义 crypto
+```
+
+### 4. 产出
+
+```text
+Finding：位置 + 数据流 + PoC + 修复建议
+可选 ATT&CK / CWE 编号
+```
+
+## 工具链
+
+| 工具 | 语言/场景 |
+|------|-----------|
+| Semgrep | 多语言快速规则 |
+| CodeQL | 深数据流（GitHub） |
+| Bandit | Python |
+| gosec / staticcheck | Go |
+| SpotBugs / FindSecBugs | Java |
+
+## 参考
+
+- `references/sast-review-checklist.md`
+- `../supply-chain-security/` `../api-security/` `../llm-security/`（Agent 代码）
+
+## 路由上下文
+
+**上游**: MASTER R26  
+**角色**: `ops/role-map.md` cae  
+**下游**: 依赖漏洞 → supply-chain；运行时验证 → pentest-tools
+
+## 任务完成自检
+
+- [ ] 是否人工验证而非只贴扫描器输出？
+- [ ] 是否含修复建议？
+- [ ] 是否限定在授权仓库范围？
+- [ ] Checklist？
+
+## Limitations
+
+- Static analysis produces false positives; manual triage is required.
+- Coverage depends on language support of the chosen SAST engine.
+
+> Adapted from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) (MIT).

package/bundled-skills/code-audit/references/sast-review-checklist.md

@@ -0,0 +1,10 @@
+# 代码审计清单（精简）
+
+- [ ] 所有外部输入入口列表
+- [ ] 鉴权/鉴权中间件覆盖
+- [ ] 多租户 ID 是否绑定会话
+- [ ] 反序列化 / pickle / YAML load
+- [ ] SSRF 出网与协议限制
+- [ ] 密钥与 token 存储
+- [ ] 文件上传路径与类型
+- [ ] 危险 exec/system/Runtime

package/bundled-skills/database-security/SKILL.md

@@ -0,0 +1,81 @@
+---
+name: database-security
+description: "Authorized database security assessment across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure, authorization gaps, UDF/command execution paths, and misconfiguration review."
+risk: offensive
+source: "https://github.com/zhaoxuya520/reverse-skill"
+source_repo: "zhaoxuya520/reverse-skill"
+source_type: community
+date_added: "2026-08-25"
+license: "MIT"
+license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
+---
+> **⚠️ AUTHORIZED USE ONLY**
+> This skill is for educational purposes or authorized security assessments only.
+> You must have explicit, written permission from the system owner before using this tool.
+> Misuse of this tool is illegal and strictly prohibited.
+
+> **Mandatory confirmation gate**
+> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
+> 1. Ask the user to state the exact target URL, IP, account, or resource.
+> 2. Ask the user to confirm written authorization and the permitted scope.
+> 3. Show the exact command(s) and explain their expected effect.
+> 4. Wait for explicit confirmation in the current conversation.
+>
+> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
+
+# Database Security Assessment
+## When to Use
+
+- Assessing database hardening and exposure within an approved scope.
+- Checking authz boundaries and risky server-side execution features.
+
+
+## 适用场景
+
+- 数据库未授权/弱口令/错误绑定 0.0.0.0
+- 权限过大、危险功能（xp_cmdshell、COPY PROGRAM、UDF）
+- 横向：从应用账号到 DBA
+- NoSQL 注入与 Redis 写文件等（授权环境）
+
+## 工作流
+
+```text
+□ 网络暴露与 TLS
+□ 账号角色与 grantee
+□ 敏感表访问控制
+□ 危险配置：file_priv、xp_cmdshell、load_file
+□ 审计日志是否开启
+□ 备份与快照权限
+```
+
+## 工具链
+
+| 工具 | 用途 |
+|------|------|
+| 官方 CLI | 连接与枚举 |
+| sqlmap | 注入验证（授权） |
+| nuclei | 已知暴露模板 |
+| 云 RDS 控制台审计 | 配置 |
+
+## 参考
+
+- `references/db-misconfig-checklist.md`
+- `../pentest-tools/` `../cloud-k8s/`
+
+## 路由上下文
+
+**上游**: MASTER R35  
+**下游**: 获 OS 命令 → attack-chain；云托管 → cloud-k8s
+
+## 任务完成自检
+
+- [ ] 是否避免未授权写删？
+- [ ] 是否区分配置问题与可利用链？
+- [ ] Checklist？
+
+## Limitations
+
+- Never run against production data stores without explicit written approval.
+- Active exploitation paths (UDF/command exec) are destructive-capable; simulate first.
+
+> Adapted from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) (MIT).

package/bundled-skills/database-security/references/db-misconfig-checklist.md

@@ -0,0 +1,9 @@
+# 数据库配置清单
+
+- [ ] 监听地址与安全组
+- [ ] 默认账号/测试账号
+- [ ] 最小权限与角色分离
+- [ ] 危险存储过程/功能关闭
+- [ ] 加密连接与证书
+- [ ] 审计与告警
+- [ ] 备份访问控制