Installs into .claude/skills of the current project.
Are you the author of Security Guidance?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/wangzhe04-security-guidance)
---
name: 安全加固
description: 离线环境下的本地安全审查与加固建议
---
# Security Guidance
Use this skill for local security review and hardening in an offline environment.
Workflow:
1. Run `code_review_scan` and `dependency_inventory` for quick signals.
2. Inspect matching code before treating a signal as a finding.
3. Prioritize exploitable issues: secrets, injection, unsafe shell execution, XSS, broad CORS, disabled TLS, unsafe file writes, and permission boundaries.
4. Recommend patches that work without cloud scanners or package downloads.
5. Separate confirmed findings from hardening suggestions.
Output expectations:
- Include file and line references for confirmed issues.
- Explain impact and the minimal fix.
- Mention scanners or dependency advisories that could not run because the environment is offline.
