Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →tencentblueking/bk-monitor-security-audit
对前端代码进行安全审计，检测 XSS、CSRF 等漏洞。当用户请求代码审查或询问代码安全性时使用。
Passed 5 of 21 test cases with the skill, and 16 of 21 without it.
1 fixed15 passed either way2 still failing4 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
We're preparing to merge a frontend PR that deals with user authentication tokens in local storage and includes custom DOM rendering functions. Can you inspect the code files for potential security flaws, sensitive data exposure, and unsafe code execution, and provide a full security review report?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies risks regarding sensitive token storage in browser localStorage | Missed | Passed |
| Evaluates custom DOM rendering for cross-site scripting risks | Missed | Passed |
The instructions your model reads when the skill loads.
skill://bk-monitor-security-audit/references/audit-rules.mdskill://bk-monitor-security-audit/references/report-template.mdskill://bk-monitor-security-audit/references/security-checklist.mdskill://bk-monitor-security-audit/references/audit-rules.mdskill://bk-monitor-security-audit/references/report-template.mdskill://bk-monitor-security-audit/references/security-checklist.mdtest cases passed, vs 16 / 21 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.