AI Plugin Index
doc-only-threat-notes
Skill by yaojingang · updated · ★ 1.3k
Keep reference notes about threat patterns for future security writing. doc-only-threat-notes is published by yaojingang on GitHub.
Last commit 8 days ago
MIT: permissive, fine for commercial use
Clear description, installs from GitHub, 1,322 stars, original repository
No risky patterns in the files we checked
Install doc-only-threat-notes
Built from the published package, never by AIgit clone --depth 1 https://github.com/yaojingang/yao-open-skills /tmp/yao-open-skills && mkdir -p ~/.claude/skills && cp -r /tmp/yao-open-skills/skills/yao-doctor-skill/evals/pressure_suite/doc-only-threat-notes ~/.claude/skills/doc-only-threat-notesRun in your terminal. Claude Code loads skills from ~/.claude/skills automatically.
git clone --depth 1 https://github.com/yaojingang/yao-open-skills /tmp/yao-open-skills && mkdir -p ~/.gemini/antigravity-cli/skills && cp -r /tmp/yao-open-skills/skills/yao-doctor-skill/evals/pressure_suite/doc-only-threat-notes ~/.gemini/antigravity-cli/skills/doc-only-threat-notesAntigravity CLI loads skills from ~/.gemini/antigravity-cli/skills, or .agents/skills for one project.
Step-by-step: install doc-only-threat-notes in Antigravity CLI
Skills can run scripts on your machine. Some need an API key: check the README.
Security check
ANo download-and-run commands, hidden instructions or signs of sending keys out were found.
Checked automatically: skills/yao-doctor-skill/evals/pressure_suite/doc-only-threat-notes/SKILL.md. This looks for known risky patterns and is not a full audit. How grades work
Inside the skill
-
SKILL.md146 B -
references/red-team-notes.md272 B
Alternatives to doc-only-threat-notes
All alternatives →
Use the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.
Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.
Reviews MSBuild code changes using a 24-dimension methodology. Activates for code review, PR review, pull request analysis, design review, architecture review, code quality assessment, or style check of MSBuild code. Covers backwards compatibility, ChangeWave discipline, performance, allocation awareness, test coverage, error message quality, logging, string comparison, API surface, target authoring, cross-platform correctness, code simplification, concurrency, naming, SDK integration, evaluation model integrity, correctness, dependency management, security, and build infrastructure.
Evidence-led osint operator technical methods and evidence interpretation for the relevant environment.
Review multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary.
Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.
doc-only-threat-notes: common questions
How do I install doc-only-threat-notes?
Run the command above to copy the skill into ~/.claude/skills/. Claude Code picks it up automatically.
Is doc-only-threat-notes free?
The code is published under the MIT licence. The service it connects to may have its own pricing.
Is doc-only-threat-notes safe to use?
It scores 73 of 100. Grades: maintenance A, licence A, quality A. Security check: grade A, no risky patterns found in the files checked. Review the code before you install. How grades work.
What are alternatives to doc-only-threat-notes?
Similar skills: reverse-skill-router, slack-bot-builder, reviewing-msbuild-code, osint-operator-specialist-methods.