dragonos-community/bug-hunter-stage1-input-randomization
.agents/skills/bug-hunter/subskills/bug-hunter-stage1-input-randomization/SKILL.md
bug-hunter 阶段 1 技能。负责提取代码改动、执行敏感信息脱敏，并按文件/代码块生成多轮随机化输入以缓解 LLM 位置偏差。
$ install --global
skillsauthnpx skillsauth add dragonos-community/dragonos bug-hunter-stage1-input-randomizationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 8:23 AM4.0s1 file scanned
SKILL.md
- name:
- bug-hunter-stage1-input-randomization
- description:
- bug-hunter 阶段 1 技能。负责提取代码改动、执行敏感信息脱敏，并按文件/代码块生成多轮随机化输入以缓解 LLM 位置偏差。
Stage 1 输入随机化
目标
把原始 diff 转换为可并行评审的多轮随机输入，并保证敏感信息不会泄露给子智能体。
步骤
- 用
git diff --cached获取改动；若为空，回退为“upstream/origin/HEAD/HEAD~1”自适应基线：BASE_REF="$(git rev-parse --abbrev-ref --symbolic-full-name @{upstream} 2>/dev/null || git symbolic-ref --quiet --short refs/remotes/origin/HEAD 2>/dev/null || echo HEAD~1)"，再执行git diff "$(git merge-base HEAD "$BASE_REF")"...HEAD。 - 将 diff 传入
scripts/redact_sensitive.py完成脱敏。 - 将脱敏后的 diff 传入
scripts/shuffle_diff.py --passes 8生成 8 轮随机序列。 - 将输出 JSON 保存为
artifacts/shuffled_passes.json。
验收
- 每一轮都包含完整改动信息。
- 不同轮次的顺序差异明显。
- 结果中不存在明文密钥与凭据。
Related Skills
dragonos-community/skill-creator
tools
VerifiedTrustedCommunity
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
1,156SKILL.mdUpdated Apr 16, 2026
dragonos-community/dragonos-gvisor-test-analysis
development
VerifiedTrustedCommunity
通过对比 Linux/gvisor 参考实现来分析 DragonOS gVisor 测试失败。输出结构化的修复文档，包含对于所有失败用例的表格格式分析文档，针对每个具体的失败用例的详细格式修复文档，并提供代码片段。当用户提及 gVisor 测试失败、特定测试用例或询问 bug 分析/修复方案时使用。
1,156SKILL.mdUpdated Apr 16, 2026
dragonos-community/dragonos-atomic-snapshot-debug
development
VerifiedTrustedCommunity
使用低扰动原子快照、GDB 现场采样和语义对比来调试 DragonOS 内核中的时序问题、Heisenbug、阻塞挂起、丢唤醒和“加日志现象改变”的问题。适用于网络、VFS、调度、IPC、驱动等子系统；当用户提到任务卡住、CPU idle 但请求不返回、阻塞点偶发失效，或明确要求在线取证且不想依赖高频日志时使用。
1,156SKILL.mdUpdated Apr 16, 2026
dragonos-community/bug-hunter-stage4-consensus-judge
tools
VerifiedTrustedCommunity
bug-hunter 阶段 4 技能。负责对缺陷桶执行加权共识投票，筛选过阈值问题，并输出裁决级结构化评审报告。
1,156SKILL.mdUpdated Apr 16, 2026