技能档案

Cwe 776 Xml Entity Expansion

Name: Cwe 776 Xml Entity Expansion
Author: DevelopersCoffee

Use this skill when you need to remediate CWE-776 (XML Entity Expansion (Billion Laughs)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing xml entity expansion (billion laughs) issues.

DevelopersCoffee0 星标2026年3月6日

职业
分类: 调试

技能内容

CWE-776 XML Entity Expansion (Billion Laughs)

Description

XML Entity Expansion (Billion Laughs)

Reference:

Cwe 776 Xml Entity Expansion

npx skills add DevelopersCoffee/java-cwe-security-skills

下载 Skill 打开源码仓库

作者: DevelopersCoffee
星标: 0
更新时间: 2026年3月6日
职业

本页内容

01CWE-776 XML Entity Expansion (Billion Laughs)

SkillsPool

搜索技能.../

Cwe 776 Xml Entity Expansion | Skills Pool

技能档案

Cwe 776 Xml Entity Expansion

DevelopersCoffee0 星标2026年3月6日

职业
分类: 调试

技能内容

CWE-776 XML Entity Expansion (Billion Laughs)

Description

XML Entity Expansion (Billion Laughs)

Reference:

Cwe 776 Xml Entity Expansion

npx skills add DevelopersCoffee/java-cwe-security-skills

下载 Skill 打开源码仓库

作者: DevelopersCoffee
星标: 0
更新时间: 2026年3月6日
职业

本页内容

01CWE-776 XML Entity Expansion (Billion Laughs)

Description

信息安全分析师

调试

Session Logs

Search and analyze your own session logs (older/parent conversations) using jq.

openclaw360.0k

调试

OpenClaw Test Heap Leaks

Investigate `pnpm test` memory growth, Vitest worker OOMs, and suspicious RSS increases in OpenClaw using the `scripts/test-parallel.mjs` heap snapshot tooling. Use when Codex needs to reproduce test-lane memory growth, collect repeated `.heapsnapshot` files, compare snapshots from the same worker PID, triage likely transformed-module retention versus likely runtime leaks, and fix or reduce the impact by patching cleanup logic or isolating hotspot tests.

openclaw360.0k

调试

Node Connect

Diagnose OpenClaw node connection and pairing failures for Android, iOS, and macOS companion apps. Use when QR/setup code/manual connect fails, local Wi-Fi works but VPS/tailnet does not, or errors mention pairing required, unauthorized, bootstrap token invalid or expired, gateway.bind, gateway.remote.url, Tailscale, or plugins.entries.device-pair.config.publicUrl.

openclaw360.0k

调试

Openclaw Qa Testing

Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.

openclaw360.0k

调试

Openclaw Secret Scanning Maintainer

Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.

openclaw360.0k

调试

Flags

Use when you need to check feature flag states, compare channels, or debug why a feature behaves differently across release channels.

facebook244.6k

信息安全分析师