Guardian风险

apiiro2026-10-25查看 1910复制 173

当用户询问此仓库中已知的安全风险、漏洞或发现时使用（"what risks does this repo have"），或按严重程度或类别筛选 Apiiro 风险。组织范围：guardian-query --global；修复：guardian-fix。

Download (.md)

📘如何使用这个技能

1
复制技能内容·点击上方「Copy SKILL.md」复制全部内容，或 Download 下载到本地
2
打开你的 AI 客户端·支持 Claude Code、Trae、Cursor、ChatGPT、DeepSeek、Kimi 等任意 AI 助手
3
粘贴为系统提示/知识文件·Claude Code：放入 .claude/skills/ 目录；普通对话：作为首条消息发送并说「请严格按这份技能文档执行」
4
直接提出你的需求·AI 会按技能定义的工作流、格式和约束来处理，无需再解释背景

💡 提示：技能生效后，每次对话只需一句需求，AI 会按 SKILL.md 的流程执行。

SKILL.md1970 chars

---
name: guardian-risks
description: "Use when the user asks about known security risks, vulnerabilities, or findings in this repo (\"what risks does this repo have\"), or filters Apiiro risks by severity or category. Org-wide: guardian-query --global; fixing: guardian-fix."
---

# Apiiro Risks

View and inspect risks via the Apiiro CLI.

## List Risks

Repository is auto-detected from git when `--repo` is omitted.

```bash
apiiro risks                                      # List risks (auto-detect repo)
apiiro risks --repo my-repo-name                  # Specify repo (defaults to default branch)
apiiro risks --repo my-repo-name --branch master  # Pin a specific monitored branch
apiiro risks --repository-id <repo-id>            # Specify repo (branch) by ID
apiiro risks --risk-level Critical                # Filter by level
apiiro risks --risk-category "API Security"       # Filter by category
apiiro risks --risk-level High --finding-category "Secret Detection"
apiiro risks -o json --page-size 50               # JSON with pagination
```

Filters: `--risk-level`, `--risk-category`, `--risk-insight`, `--finding-category`, `--application-id`.

Scope: `--repo <name>` (resolves to the repository's default branch), `--branch <name>` (pin a specific monitored branch — repos with multiple monitored branches have one profile per branch, each with its own ID), `--repository-id <id>` (target a branch profile directly). Without any scope, the repository is auto-detected from the current git checkout (including its branch).

## Get Risk Details

```bash
apiiro risks get <risk-id>
apiiro risks get <risk-id> -o json
```

## Remediate / Fix

```bash
apiiro risks remediate <risk-id>   # curated remediation prompt only
apiiro risks fix <risk-id>         # curated, with automatic Guardian fallback (see guardian-fix skill)
```

For fixing risks, use the guardian-fix skill.

## Global Options

`-o, --output <json|text>`, `-f, --file <path>`, `--no-color`.

来源：skillsdirectory

Guardian风险

📘如何使用这个技能

评论0