INDIE WEB/独立站与出海
lachydotmcg/slopsec
中文简介生成中A Claude Code skill that security-audits vibe-coded SaaS apps. 50 common ways AI-generated apps get pwned, turned into a repeatable checklist, severity scoring, and findings report!
怎么装：Install: /plugin marketplace add lachydotmcg/slopsec
02 / 现在的位置02 / Why now
首次发现FIRST SEEN
03 OCT 202603 OCT 2026
增长GROWTH
历史不足Not enough history
只有 1 个快照，还不足以计算增长Only 1 snapshots so far — not enough to compute growth
讨论DISCUSSION
暂无None
还没有采集到外部讨论No external discussion collected yet
状态STATUS
持续活跃Active
03 / 它能帮你做什么03 / What it helps you do
中文能力说明生成中Chinese capability copy is being generated
中文能力说明生成中Chinese capability copy is being generated
05 / 安装05 / Install
$ README 里给出的安装方式。The installation method given in the README.
两种装法选一个即可 —— 上面那条给命令行用户，下面那条给写代码的用户。Pick one of the two — the first is for command-line users, the second for people writing code.
06 / 限制与风险06 / Limits and risk
风险不是警告，是可信度的一部分。以下结论只基于文档静态扫描，我们不会执行项目里的任何代码。Risk here is evidence, not an alarm. These findings come from static scanning of the docs; we never execute a project’s code.
限制LIMITS
未知Unknown
静态扫描STATIC SCAN
在 README、SKILL.md 和依赖清单中没有匹配到已知风险模式。No known risk patterns matched in the README, SKILL.md or dependency list.这不等于安全that does not mean it is safe，只能说明文档里没写。 — only that the docs do not mention it.
这里只做静态扫描：读 README、SKILL.md 和依赖清单，不执行代码。没有命中不代表安全。This is static scanning only: we read the README, SKILL.md and dependency list, and never execute code. No findings does not mean safe.
{
"agents": [
{
"agent": "claude-code",
"evidence": "tree: .claude-plugin/"
}
],
"apiKey": "from AWS? Stop 'hiding' your API keys in plaintext. It sounds like you need:*",
"docker": null,
"taxonomy": {
"scores": {
"design": 0,
"ai-tools": 1,
"dev-tools": 0,
"indie-web": 3,
"skill-agent": 4,
"productivity": 0
},
"primary": "indie-web",
"secondary": null
},
"localRuntime": null,
"skillMdTotal": 1,
"skillMdErrors": [],
"treeTruncated": false,
"categoryScores": {
"data": 0,
"agent": 0,
"media": 0,
"design": 1,
"browser": 0,
"devtool": 0,
"security": 10,
"marketing": 0,
"productivity": 0
},
"classification": [
{
"signal": "1 SKILL.md with name + description",
"weight": 0.95
},
{
"signal": "README describes a Claude / Agent Skill",
"weight": 0.7
},
{
"signal": "Claude Code plugin manifest",
"weight": 0.7
},
{
"signal": "description mentions AI",
"weight": 0.2
}
],
"scannedSources": [
"readme",
"SKILL.md"
],
"skillMdFetched": 1
}