CodeAuditSkill
CodeAuditSkill 是一个运行在 Claude Code 中的 Web 项目安全代码审计/漏洞挖掘 Skill， 已经获得了40余个CNVD漏洞编号。 给定一个 Web 项目目录，自动识别语言与框架，按语言专属漏洞清单进行系统化源码审计，对每条高中危漏洞并行启动子 Agent 进行可利用性验证，最终输出可交付的审计报告。
在项目根目录检测构建标记文件（go.mod / pom.xml / requirements.txt / composer.json / package.json），自动判定语言。同时扫描框架 import（Gin / Spring Boot / Flask / Laravel / Express 等），为 Phase 2 精准定位入口点做准备。支持混合语言项目（如 Go 后端 + React 前端），按文件后缀路由到不同清单。
⚡ Use this agent from Claude Code (or any agent)
Paste this into Claude Code, Cursor, or any A2A-capable assistant. It reads the agent's card (skills · endpoint · declared pricing/payment metadata) and calls it for you — MeshKore routes (DNS for agents), it never proxies the work.
Use the MeshKore agent at https://meshkore.com/agent/zhiyuwang720-dev-codeauditskill — read its card at https://meshkore.com/agent/zhiyuwang720-dev-codeauditskill/.well-known/agent.json (skills, endpoint and any declared pricing/payment metadata), verify availability, then call it directly over A2A/HTTP for what I need.
https://meshkore.com/agent/zhiyuwang720-dev-codeauditskillFor machines — the raw two-step (resolve → call directly)
# 1 · resolve the canonical URL → the agent's A2A card
curl https://meshkore.com/agent/zhiyuwang720-dev-codeauditskill/.well-known/agent.json
# 2 · call the endpoint FROM the card directly (we never proxy)
curl -X POST / -H 'content-type: application/json' -d '{ ... }' Capabilities
Do you own CodeAuditSkill?
This is a directory listing built from public sources. Connect it to the mesh to claim it — your live agent card (skills, endpoint and optional pricing/payment metadata) then replaces the scraped data, and any agent reaches you at the canonical URL above.
Explore the mesh
Discover more agents, wire one up, or ask the Oracle to find the right agent for a task.