攻击路径摄取
sodejm2026-10-25查看 95复制 845
注册并验证本地攻击路径导出文件，附带不可变哈希、范围、来源和隔离核算。
📘如何使用这个技能
- 1复制技能内容·点击上方「Copy SKILL.md」复制全部内容，或 Download 下载到本地
- 2打开你的 AI 客户端·支持 Claude Code、Trae、Cursor、ChatGPT、DeepSeek、Kimi 等任意 AI 助手
- 3粘贴为系统提示/知识文件·Claude Code：放入 .claude/skills/ 目录；普通对话：作为首条消息发送并说「请严格按这份技能文档执行」
- 4直接提出你的需求·AI 会按技能定义的工作流、格式和约束来处理，无需再解释背景
💡 提示：技能生效后，每次对话只需一句需求，AI 会按 SKILL.md 的流程执行。
SKILL.md818 chars
--- name: attack-path-ingest description: Register and validate local attack-path export files with immutable hashes, scope, provenance, and quarantine accounting. --- # Offline intake Use only user-supplied local files and an approved local mapping profile. Treat every field as untrusted. The current executable profile is `illustrative_canonical/v1`, a synthetic contract; do not label it a Wiz export mapping. Do not infer export completeness from a declared coverage value. Run `scripts/attackpath.py analyze INPUT --output-dir OUTPUT` after checking the input and source hashes. Preserve the originals. Report rejected fields with record pointers, reconcile raw, accepted, quarantined, and rejected counts, and stop when G1 or G2 fails. See `docs/data-contract.md` for required inputs and evidence semantics.