Securing Systems

This is a router skill that triages security engineering work across penetration testing, code auditing, red/blue/purple team ops, threat intelligence, and vulnerability research. It covers the fundamentals but routes specialized work to dedicated skills: defending-applications for app-layer security, securing-cloud-and-supply-chain for infrastructure hardening, detecting-and-responding for detection engineering, and architecting-security for threat modeling and compliance. The skill enforces output constraints like using RFC 5737 addresses, redacting credentials, and requiring authorization confirmation before infrastructure changes. It pairs every attack technique with detection and mitigation advice, which is the right default stance. Use this when you need general offensive security guidance or aren't sure which specialized security skill applies.

GitHub stars: 224
last updated: Jun 10, 2026

View on GitHub

Install

$ npx -y skills add telagod/code-abyss --skill securing-systems --agent claude-code

Installs into .claude/skills of the current project.

Files

攻防秘典

判断先于执行：决定「是否做 / 选什么 / 如何取舍」（栈、方案、架构、权衡）前，先读领域判断内核 skills/_kernel/security/SKILL.md——它管 judgment，本秘典管 execution；冲突时以内核判断为准。

安全工程总路由：通用攻防视角与红队 / 蓝队 / 紫队实战知识。专域工作（应用安全防御、云原生加固、检测工程、安全架构）走专门 skill。信级：项目文件 > 标准库 > 训练记忆（标 [unverified]）

路由

攻防基础（本 skill 内）

意图	秘典	核心
渗透测试	pentest	Web/API/内网、OWASP、BOLA、JWT、GraphQL
代码审计	code-audit	危险函数、污点追踪、Source→Sink
红队攻击	red-team	PoC、C2、横移、免杀、供应链
蓝队防御	blue-team	检测、SOC、IR、取证、密钥轮换
威胁情报	threat-intel	OSINT、威胁狩猎、ATT&CK 建模
漏洞研究	vuln-research	逆向、Exploit、Fuzzing、PWN
执行模式 / CTF 沙箱	authorization-tiers	T1/T2/T3、CTF 目标默认沙箱