security

Agent Skills › iii-experimental/agentos › security

security

GitHub

提供安全扫描、能力检查和审计日志功能，用于检测注入攻击、验证代理操作权限及追踪安全事件。

plugin/skills/security/SKILL.md iii-experimental/agentos

Trigger Scenarios

需要检测输入中的注入或遍历风险需验证特定代理对资源的操作权限需查询或审查安全审计日志

Install

npx skills add iii-experimental/agentos --skill security -g -y

More Options

Non-standard path

npx skills add https://github.com/iii-experimental/agentos/tree/main/plugin/skills/security -g -y

Use without installing

npx skills use iii-experimental/agentos@security

指定 Agent (Claude Code)

npx skills add iii-experimental/agentos --skill security -a claude-code -g -y

安装 repo 全部 skill

npx skills add iii-experimental/agentos --all -g -y

预览 repo 内 skill

npx skills add iii-experimental/agentos --list

SKILL.md

Frontmatter

{
    "name": "security",
    "effort": "normal",
    "toolScope": [
        "Bash",
        "Read"
    ],
    "description": "Security scanning — injection detection, capability checks, audit trails"
}

Security operations:

Scan injection: curl -X POST http://localhost:3111/api/security/scan -H 'Content-Type: application/json' -d '{"input": "<text>", "checks": ["injection", "traversal", "command"]}'
Check capability: curl -X POST http://localhost:3111/api/security/capability -H 'Content-Type: application/json' -d '{"agentId": "claude-code", "action": "write", "resource": "/path"}'
Audit: curl http://localhost:3111/api/security/audit?agentId=claude-code&limit=50