攻击路径报告
sodejm2026-10-25查看 417复制 235
生成可复现的离线攻击路径报告和本地修复台账，包含引用、差距和关闭标准。
📘如何使用这个技能
- 1复制技能内容·点击上方「Copy SKILL.md」复制全部内容，或 Download 下载到本地
- 2打开你的 AI 客户端·支持 Claude Code、Trae、Cursor、ChatGPT、DeepSeek、Kimi 等任意 AI 助手
- 3粘贴为系统提示/知识文件·Claude Code：放入 .claude/skills/ 目录；普通对话：作为首条消息发送并说「请严格按这份技能文档执行」
- 4直接提出你的需求·AI 会按技能定义的工作流、格式和约束来处理，无需再解释背景
💡 提示：技能生效后，每次对话只需一句需求，AI 会按 SKILL.md 的流程执行。
SKILL.md839 chars
--- name: attack-path-report description: Produce a reproducible offline attack-path report and local remediation ledger with citations, gaps, and closure criteria. --- # Reporting Use the deterministic CLI output as the canonical report. Keep source assertions, derived relationships, hypotheses, and recommendations labeled. Include source pointers for material claims, a coverage statement, supported and candidate paths, excluded transitions, `unrated` impact when applicable, pending mappings, actions, alternatives, and human decisions. Do not mark remediation closed from a recommendation or a later export alone. Closure needs an owner and the stated validation evidence. Never overwrite an existing output directory. Compare run IDs and canonical JSON bytes for identical inputs, rules, and profiles. See `docs/operations.md`.