by xingchen20lj
VulnGate — a Codex-native source-audit pipeline for ANY codebase: libraries (parsing/serialization), web frameworks (Spring/Struts), middleware/servers (Tomcat/Jetty), logging libraries (Log4j/Logback), expression engines, message/RPC stacks, and applications. Runs the S1→S8 audit loop (attack-surface map → candidates → source audit → PoC matrix → novelty gate → CVSS → disclosure-ready report) with hard evidence gates (G0–G5) driven by the host agent.
Aliases: @vulngate, @vg, 漏洞审计, 源码审计, 审计管线, vuln audit.
Coverage-driven auditing: full source inventory, heuristic call graphs and flows, security control gaps, sibling differentials, candidate scheduling, and macOS/Electron/native application reconstruction.
Codex1 Skill