实战 SRC / 众测 / Bug bounty 漏洞挖掘工作流 skill。包含：5 阶段方法论（intake → recon → enum → hunt → report）、19 个攻击类 playbook（SQLi/XSS/RCE/SSRF/IDOR/CSRF/Path Traversal/File Upload/SSTI/XXE/Race/HTTP Smuggling/OAuth/JWT/SAML/GraphQL/Mobile/LLM/DoS）、305 个结构化 payload、263 个 WAF/EDR 绕过变体、2887 份 HackerOne 真实 High/Critical 已披露案例、77,000+ WooYun 案例统计、国产 OA / 中间件指纹库、银行 / 电信行业垂直 playbook。
Install
npx skills add zhaoxuya520/reverse-skill --skill src-hunternpx skills add zhaoxuya520/reverse-skill --skill src-hunter -a claude-code -gnpx skills add zhaoxuya520/reverse-skill --skill src-hunter -a codex -ggemini skills install https://github.com/zhaoxuya520/reverse-skill.git --path skills/pentest-tools/src-huntergh skill install zhaoxuya520/reverse-skill src-huntergit clone --depth 1 https://github.com/zhaoxuya520/reverse-skill /tmp/zhaoxuya520__reverse-skill
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/zhaoxuya520__reverse-skill/skills/pentest-tools/src-hunter ~/.claude/skills/src-hunter # Claude Code
cp -R /tmp/zhaoxuya520__reverse-skill/skills/pentest-tools/src-hunter ~/.agents/skills/src-hunter # Codex, Cursor, Gemini CLI, Copilot, OpenCode