{"id":4362,"date":"2026-09-03T17:54:13","date_gmt":"2026-09-03T09:54:13","guid":{"rendered":"https:\/\/ai.jxgzhc.cn\/?p=4362"},"modified":"2026-09-03T17:54:16","modified_gmt":"2026-09-03T09:54:16","slug":"%e5%ae%a1%e8%ae%a1%e8%bd%af%e4%bb%b6%e5%b9%b6%e5%8f%91%e7%8e%b0%e5%ae%89%e5%85%a8%e6%bc%8f%e6%b4%9e","status":"publish","type":"post","link":"https:\/\/ai.jxgzhc.cn\/?p=4362","title":{"rendered":"\u5ba1\u8ba1\u8f6f\u4ef6\u5e76\u53d1\u73b0\u5b89\u5168\u6f0f\u6d1e"},"content":{"rendered":"

\"\u5ba1\u8ba1\u8f6f\u4ef6\u5e76\u53d1\u73b0\u5b89\u5168\u6f0f\u6d1e\"<\/p>\n

\u901a\u8fc7\u81ea\u52a8\u5316\u5b89\u5168\u5ba1\u8ba1\u4e0e\u6df1\u5ea6\u4ee3\u7801\u5206\u6790\uff0c\u5feb\u901f\u53d1\u73b0\u5e76\u4fee\u590d\u6f5c\u5728\u7684\u5b89\u5168\u6f0f\u6d1e\u3002<\/strong><\/p>\n

\u8be6\u7ec6\u4ecb\u7ecd<\/h2>\n

Trail of Bits Skills Marketplace<\/p>\n

Trail of Bits \u63d0\u4f9b\u7684 Claude Code \u63d2\u4ef6\u5e02\u573a\uff0c\u5305\u542b\u591a\u79cd\u6280\u80fd\uff0c\u7528\u4e8e\u589e\u5f3a AI \u8f85\u52a9\u7684\u5b89\u5168\u5206\u6790\u3001\u6d4b\u8bd5\u548c\u5f00\u53d1\u5de5\u4f5c\u6d41\u3002Codex \u53ef\u901a\u8fc7\u5176 Claude \u5e02\u573a\u517c\u5bb9\u6027\u52a0\u8f7d\u6b64\u5e02\u573a\u3002<\/p>\n

\u53ef\u7528\u63d2\u4ef6<\/p>\n

\u667a\u80fd\u5408\u7ea6\u5b89\u5168<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

building-secure-contracts
\u667a\u80fd\u5408\u7ea6\u5b89\u5168\u5de5\u5177\u5305\uff0c\u5305\u542b6\u6761\u533a\u5757\u94fe\u7684\u6f0f\u6d1e\u626b\u63cf\u5668<\/p>\n

entry-point-analyzer
\u8bc6\u522b\u667a\u80fd\u5408\u7ea6\u4e2d\u6539\u53d8\u72b6\u6001\u7684\u5165\u53e3\u70b9\uff0c\u7528\u4e8e\u5b89\u5168\u5ba1\u8ba1<\/p>\n

\u4ee3\u7801\u5ba1\u8ba1<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

agentic-actions-auditor
\u5ba1\u8ba1 GitHub Actions \u5de5\u4f5c\u6d41\u4e2d\u7684 AI \u4ee3\u7406\u5b89\u5168\u6f0f\u6d1e<\/p>\n

audit-context-building
\u901a\u8fc7\u8d85\u7ec6\u7c92\u5ea6\u4ee3\u7801\u5206\u6790\u6784\u5efa\u6df1\u5c42\u67b6\u6784\u4e0a\u4e0b\u6587<\/p>\n

burpsuite-project-parser
\u641c\u7d22\u5e76\u63d0\u53d6 Burp Suite \u9879\u76ee\u6587\u4ef6\u4e2d\u7684\u6570\u636e<\/p>\n

c-review
\u5168\u9762\u7684 C\/C++ \u5b89\u5168\u5ba1\u67e5\uff0c\u652f\u6301\u96c6\u7fa4\u5e76\u884c\u5de5\u4f5c\u5668\u548c SARIF \u8f93\u51fa<\/p>\n

differential-review
\u57fa\u4e8e Git \u5386\u53f2\u5206\u6790\u7684\u5b89\u5168\u5dee\u5f02\u5ba1\u67e5<\/p>\n

dimensional-analysis
\u7528\u91cf\u7eb2\u5206\u6790\u6ce8\u91ca\u4ee3\u7801\u5e93\uff0c\u68c0\u6d4b\u5355\u4f4d\u4e0d\u5339\u914d\u548c\u516c\u5f0f\u9519\u8bef<\/p>\n

fp-check
\u5bf9\u5b89\u5168\u6f0f\u6d1e\u5206\u6790\u8fdb\u884c\u7cfb\u7edf\u6027\u7684\u5047\u9633\u6027\u9a8c\u8bc1\uff0c\u5305\u542b\u5f3a\u5236\u95e8\u63a7\u5ba1\u67e5<\/p>\n

insecure-defaults
\u68c0\u6d4b\u4e0d\u5b89\u5168\u7684\u9ed8\u8ba4\u914d\u7f6e\u3001\u786c\u7f16\u7801\u51ed\u636e\u548c\u5931\u8d25\u5f00\u653e\u7684\u5b89\u5168\u6a21\u5f0f<\/p>\n

rust-review
\u5168\u9762\u7684 Rust \u5b89\u5168\u5ba1\u67e5\uff0c\u6db5\u76d6\u5b89\u5168\/\u975e\u5b89\u5168\u8fb9\u754c\u3001\u5185\u5b58\u5b89\u5168\u3001\u5e76\u53d1\u3001panic-DoS\u3001FFI \u548c\u5f02\u6b65\u8fd0\u884c\u65f6\uff0c\u652f\u6301 SARIF \u8f93\u51fa<\/p>\n

semgrep-rule-creator
\u521b\u5efa\u548c\u4f18\u5316 Semgrep \u89c4\u5219\u4ee5\u68c0\u6d4b\u81ea\u5b9a\u4e49\u6f0f\u6d1e<\/p>\n

semgrep-rule-variant-creator
\u5c06\u73b0\u6709 Semgrep \u89c4\u5219\u79fb\u690d\u5230\u65b0\u76ee\u6807\u8bed\u8a00\uff0c\u5e76\u8fdb\u884c\u6d4b\u8bd5\u9a71\u52a8\u9a8c\u8bc1<\/p>\n

sharp-edges
\u8bc6\u522b\u6613\u51fa\u9519\u7684 API\u3001\u5371\u9669\u914d\u7f6e\u548c\u6613\u8bef\u7528\u8bbe\u8ba1<\/p>\n

static-analysis
\u9759\u6001\u5206\u6790\u5de5\u5177\u5305\uff0c\u5305\u542b CodeQL\u3001Semgrep \u548c SARIF \u89e3\u6790<\/p>\n

supply-chain-risk-auditor
\u5ba1\u8ba1\u9879\u76ee\u4f9d\u8d56\u7684\u4f9b\u5e94\u94fe\u5a01\u80c1\u6001\u52bf<\/p>\n

testing-handbook-skills
\u6765\u81ea Testing Handbook \u7684\u6280\u80fd\uff1a\u6a21\u7cca\u6d4b\u8bd5\u3001\u9759\u6001\u5206\u6790\u3001\u6d88\u6bd2\u5668\u3001\u8986\u76d6\u7387<\/p>\n

trailmark
\u4ee3\u7801\u56fe\u5206\u6790\u3001\u6709\u754c\u5b50\u4ee3\u7406\u4e0a\u4e0b\u6587\u5207\u7247\u3001Mermaid \u56fe\u8868\u3001\u53d8\u5f02\u6d4b\u8bd5\u5206\u7c7b\u548c\u534f\u8bae\u9a8c\u8bc1<\/p>\n

variant-analysis
\u57fa\u4e8e\u6a21\u5f0f\u7684\u5206\u6790\uff0c\u8de8\u4ee3\u7801\u5e93\u67e5\u627e\u76f8\u4f3c\u6f0f\u6d1e<\/p>\n

vulnerability-triage-brocards
\u4f7f\u75287\u79cd\u5206\u7c7b\u5361\u5bf9\u6f0f\u6d1e\u62a5\u544a\u8fdb\u884c\u5206\u7c7b\uff0c\u53ef\u63a5\u53d7\u3001\u9a73\u56de\u6216\u8bf7\u6c42\u66f4\u591a\u4fe1\u606f\u540e\u518d\u6df1\u5165\u5206\u6790<\/p>\n

\u6076\u610f\u8f6f\u4ef6\u5206\u6790<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

yara-authoring
YARA \u68c0\u6d4b\u89c4\u5219\u7f16\u5199\uff0c\u5305\u542b lint \u68c0\u67e5\u3001\u539f\u5b50\u5206\u6790\u548c\u6700\u4f73\u5b9e\u8df5<\/p>\n

\u9a8c\u8bc1<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

constant-time-analysis
\u68c0\u6d4b\u5bc6\u7801\u5b66\u4ee3\u7801\u4e2d\u7f16\u8bd1\u5668\u5f15\u5165\u7684\u65f6\u5e8f\u4fa7\u4fe1\u9053<\/p>\n

mutation-testing
\u914d\u7f6e mewt\/muton \u53d8\u5f02\u6d4b\u8bd5\u6d3b\u52a8\u2014\u2014\u8bbe\u5b9a\u76ee\u6807\u3001\u8c03\u6574\u8d85\u65f6\u3001\u4f18\u5316\u957f\u8fd0\u884c<\/p>\n

property-based-testing
\u591a\u8bed\u8a00\u548c\u667a\u80fd\u5408\u7ea6\u7684\u5c5e\u6027\u6d4b\u8bd5\u6307\u5bfc<\/p>\n

spec-to-code-compliance
\u533a\u5757\u94fe\u5ba1\u8ba1\u7684\u89c4\u8303\u5230\u4ee3\u7801\u5408\u89c4\u6027\u68c0\u67e5\u5668<\/p>\n

zeroize-audit
\u68c0\u6d4b C\/C++ \u548c Rust \u4e2d\u7f3a\u5931\u6216\u88ab\u7f16\u8bd1\u5668\u6d88\u9664\u7684\u673a\u5bc6\u6570\u636e\u96f6\u5316\u64cd\u4f5c<\/p>\n

\u9006\u5411\u5de5\u7a0b<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

dwarf-expert
\u4e0e DWARF \u8c03\u8bd5\u683c\u5f0f\u4ea4\u4e92\u5e76\u7406\u89e3\u5176\u5185\u5bb9<\/p>\n

\u79fb\u52a8\u5b89\u5168<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

firebase-apk-scanner
\u626b\u63cf Android APK \u4e2d\u7684 Firebase \u5b89\u5168\u914d\u7f6e\u9519\u8bef<\/p>\n

\u5f00\u53d1<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

ask-questions-if-underspecified
\u5728\u5b9e\u73b0\u524d\u6f84\u6e05\u9700\u6c42<\/p>\n

devcontainer-setup
\u521b\u5efa\u9884\u914d\u7f6e\u7684 devcontainer\uff0c\u5305\u542b Claude Code \u548c\u8bed\u8a00\u7279\u5b9a\u5de5\u5177<\/p>\n

gh-cli
\u62e6\u622a GitHub URL \u83b7\u53d6\uff0c\u91cd\u5b9a\u5411\u5230\u5df2\u8ba4\u8bc1\u7684 gh CLI<\/p>\n

git-cleanup
\u5b89\u5168\u6e05\u7406 git worktrees \u548c\u672c\u5730\u5206\u652f\uff0c\u5305\u542b\u95e8\u63a7\u786e\u8ba4\u5de5\u4f5c\u6d41<\/p>\n

github-triage
\u5206\u7c7b GitHub \u5f00\u653e Issue \u548c PR\uff1a\u5408\u5e76\u5df2\u901a\u8fc7 bot\/\u6279\u51c6\u7684 PR\uff0c\u901a\u8fc7\u5b50\u4ee3\u7406\u5ba1\u67e5\u672a\u5ba1\u67e5\u7684 PR\uff0c\u5173\u95ed\u5df2\u89e3\u51b3\u7684 Issue \u5e76\u9644\u5e26\u5f15\u7528\u8bc4\u8bba\uff0c\u4ea4\u53c9\u94fe\u63a5\u5f85\u4fee\u590d\uff0c\u5176\u4f59\u7528\u672c\u5730\u4f18\u5148\u7ea7\u548c\u53d8\u66f4\u5927\u5c0f\u4f30\u7b97\u6253\u5206<\/p>\n

let-fate-decide
\u4f7f\u7528\u52a0\u5bc6\u968f\u673a\u6027\u62bd\u5854\u7f57\u724c\uff0c\u4e3a\u6a21\u7cca\u89c4\u5212\u589e\u52a0\u71b5<\/p>\n

modern-python
\u4f7f\u7528 uv\u3001ruff \u548c pytest \u7684\u73b0\u4ee3 Python \u5de5\u5177\u548c\u6700\u4f73\u5b9e\u8df5<\/p>\n

open-sourcing
\u51c6\u5907\u4ed3\u5e93\u516c\u5f00\u53d1\u5e03\uff1a\u5bc6\u94a5\u536b\u751f\u3001\u8bb8\u53ef\u3001CI \u5c31\u7eea\u548c\u53d1\u5e03\u81ea\u52a8\u5316<\/p>\n

seatbelt-sandboxer
\u751f\u6210\u6700\u5c0f\u5316\u7684 macOS Seatbelt \u6c99\u7bb1\u914d\u7f6e<\/p>\n

second-opinion
\u4f7f\u7528\u5916\u90e8 LLM CLI\uff08OpenAI Codex\u3001Google Gemini\uff09\u5bf9\u53d8\u66f4\u3001\u5dee\u5f02\u6216\u63d0\u4ea4\u8fdb\u884c\u4ee3\u7801\u5ba1\u67e5\u3002\u9644\u5e26 Codex \u5185\u7f6e\u7684 MCP \u670d\u52a1\u5668<\/p>\n

skill-improver
\u901a\u8fc7\u81ea\u52a8\u4fee\u590d-\u5ba1\u67e5\u5faa\u73af\u8fdb\u884c\u8fed\u4ee3\u6280\u80fd\u4f18\u5316<\/p>\n

workflow-skill-design
\u57fa\u4e8e\u5de5\u4f5c\u6d41\u7684 Claude Code \u6280\u80fd\u8bbe\u8ba1\u6a21\u5f0f\uff0c\u5305\u542b\u5ba1\u67e5\u4ee3\u7406<\/p>\n

\u56e2\u961f\u7ba1\u7406<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

culture-index
\u89e3\u8bfb\u4e2a\u4eba\u548c\u56e2\u961f\u7684\u6587\u5316\u6307\u6570\u8c03\u67e5\u7ed3\u679c<\/p>\n

\u5de5\u5177<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

claude-in-chrome-troubleshooting
\u8bca\u65ad\u548c\u4fee\u590d Claude in Chrome MCP \u6269\u5c55\u7684\u8fde\u63a5\u95ee\u9898<\/p>\n

\u57fa\u7840\u8bbe\u65bd<\/p>\n

\u63d2\u4ef6
\u63cf\u8ff0<\/p>\n

debug-buttercup
\u8c03\u8bd5 Buttercup Kubernetes \u90e8\u7f72<\/p>\n

\u6548\u679c\u793a\u4f8b<\/p>\n

\u4ee5\u4e0b\u6f0f\u6d1e\u662f\u4f7f\u7528 Trail of Bits Skills \u53d1\u73b0\u7684\uff1a<\/p>\n

\u6280\u80fd
\u6f0f\u6d1e<\/p>\n

constant-time-analysis
ML-DSA \u7b7e\u540d\u4e2d\u7684\u65f6\u5e8f\u4fa7\u4fe1\u9053<\/p>\n

\u5982\u679c\u4f60\u53d1\u73b0\u4e86\u6f0f\u6d1e\uff0c\u53ef\u4ee5\u901a\u8fc7 \u63d0\u4ea4 Issue \u544a\u77e5\u6211\u4eec\u3002<\/p>\n

\u524d\u7f6e\u6761\u4ef6<\/p>\n

\u9700\u8981 Claude Code \u6216 Codex \u73af\u5883\u6765\u52a0\u8f7d\u6b64\u63d2\u4ef6\u5e02\u573a\u3002<\/p>\n

\u6ce8\u610f\u4e8b\u9879<\/p>\n

\u6b64\u5e02\u573a\u7531 Trail of Bits \u63d0\u4f9b\uff0c\u7528\u4e8e\u589e\u5f3a AI \u8f85\u52a9\u7684\u5b89\u5168\u5206\u6790\u3001\u6d4b\u8bd5\u548c\u5f00\u53d1\u5de5\u4f5c\u6d41\u3002<\/p>\n

\u6bcf\u4e2a\u63d2\u4ef6\u6709\u7279\u5b9a\u7684\u529f\u80fd\uff0c\u8bf7\u6839\u636e\u9700\u6c42\u9009\u62e9\u4f7f\u7528\u3002<\/p>\n

\u8bd5\u8bd5\u8fd9\u6837\u505a<\/h2>\n