Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
检测故障开放的不安全默认设置（硬编码的秘密、弱身份验证、宽松的安全性），这些设置允许应用程序在生产中不安全地运行。在审计安全性、审核配置管理或分析环境变量处理时使用。
Category: developer (开发工具) · Author: trailofbits · Version: @main · License: CC-BY-SA-4.0
npx skills add trailofbits/insecure-defaults下载完整 Skill 目录，包含 SKILL.md 及所有相关文件
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Control Philips Hue lights and scenes via the OpenHue CLI.
OpenProse VM skill pack. Activate on any `prose` command, .prose files, or OpenProse mentions; orchestrates multi-agent workflows.
Query Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.
Transcribe audio via OpenAI Audio Transcriptions API (Whisper).
Start voice calls via the OpenClaw voice-call plugin.
Category:developer