Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add asaotomo/DeepSentry --skill vuln-scangit clone --depth 1 https://github.com/asaotomo/DeepSentryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/asaotomo/deepsentry/vuln-scan)<a href="https://agentmods.dev/skills/asaotomo/deepsentry/vuln-scan"><img src="https://agentmods.dev/badge/skills/asaotomo/deepsentry/vuln-scan.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00521 |
| Opus 5 | $0.00019 | $0.00260 |
| Sonnet 5 | $0.00008 | $0.00104 |
| Haiku 4.5 | $0.00004 | $0.00052 |
Grade C, and why
vuln-scan scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
awk -F: '($2=="" || $2=="!") {print $1}' /etc/shadow 2>/dev/null What it actually says
漏洞扫描 Skill
何时使用
- 用户要求系统安全基线检查
- 新服务器上线前的安全评估
- 合规审计（等保/CIS Benchmark）
检查清单
1. 账户安全
# UID=0 的非 root 账户
awk -F: '$3==0 && $1!="root" {print}' /etc/passwd
# 空口令账户
awk -F: '($2=="" || $2=="!") {print $1}' /etc/shadow 2>/dev/null
# 可登录用户
grep -v nologin /etc/passwd | grep -v false
2. 网络暴露
# 监听端口
ss -tlnp 2>/dev/null || netstat -tlnp
# 防火墙状态
iptables -L -n 2>/dev/null || ufw status 2>/dev/null
# 高危端口: 21, 23, 445, 3389, 6379, 27017
3. 文件权限
# SUID 文件
find / -perm -4000 -type f 2>/dev/null | head -20
# 全局可写目录
find / -type d -perm -o+w 2>/dev/null | head -10
4. 计划任务
crontab -l 2>/dev/null
cat /etc/crontab 2>/dev/null
ls -la /etc/cron.* 2>/dev/null
输出格式
按风险等级分类：
## 脆弱性扫描报告
### 🔴 高风险
- [发现项 | 详情 | 修复建议]
### 🟡 中风险
- [发现项 | 详情 | 修复建议]
### 🟢 低风险 / 信息
- [发现项 | 详情]
注意事项
- shadow 文件读取可能需要 root
- 禁止执行修复操作，仅报告
- Windows 环境使用 wmic/netsh 替代
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 81 lines · 39 tokens per session scan C e618bcd9d30c
vuln-scan is a skill published in the GitHub repository asaotomo/DeepSentry (25 stars, last pushed 3d ago), licensed Apache-2.0. It adds 39 tokens to every session and 521 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 1 finding (reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skill-creator
Create, install, or update skills in the workspace. Use when (1) installing a skill from a URL or remote source, (2) creating a new skill from scratch, (3) updating or restructuring existing skills. Always use this skill for any skill installation or creation task.
image-generation
Generate or edit images from text prompts. Use when the user asks to create, draw, design, or edit an image, illustration, photo, icon, poster, or any visual content.
knowledge-wiki
Manage the personal knowledge wiki. Use when the user shares articles, documents, or asks to organize knowledge; when a conversation produces insights worth preserving as structured knowledge; or when the user asks about the knowledge base.
smart-docs
AI-powered comprehensive codebase documentation generator. Analyzes project structure, identifies architecture patterns, creates C4 model diagrams, and generates professional technical documentation. Use when users need to document codebases, understand software architecture, create technical specs, or generate…
ai-context
Project knowledge base for coding agents. Activate when: (1) starting a new session in this project, (2) encountering unfamiliar code patterns or architecture decisions, (3) user asks about project design or rationale, (4) before making significant structural changes. Contains tiered knowledge from stable design…
deepwiki-rs
AI-powered Rust documentation generation engine for comprehensive codebase analysis, C4 architecture diagrams, and automated technical documentation. Use when Claude needs to analyze source code, understand software architecture, generate technical specs, or create professional documentation from any programming…