数据泄露影响面评估

原名：data-breach-blast-radius

在授权范围内盘点敏感数据流和暴露面，评估潜在泄露影响。

中文 Skills 技能说明

适合上线前安全评审和事件预案，不用于获取数据或攻击系统。只读取用户明确授权的代码、配置和架构资料，输出应脱敏；发现凭据只报告位置和处置建议，不展示秘密值。

上游能力依据

上游原始适用说明：Pre-breach impact analysis: inventories sensitive data (PII, PHI, PCI-DSS, credentials), traces data flows, scores exposure vectors, and produces a regulatory blast radius report with fine ranges sourced verbatim from GDPR Art. 83, CCPA § 1798.155(a), and HIPAA 45 CFR § 160.404. Cost benchmarks from IBM Cost of a Data Breach Report (annually updated). All citations in references/SOURCES.md for verification. Use when asked: "assess breach impact", "what data could be exposed", "calculate blast radius", "data exposure analysis", "how bad would a breach be", "quantify data risk", "sensitive data inventory", "data flow security audit", "pre-breach assessment", "worst-case breach scenario", "breach readiness", "data risk report", "/data-breach-blast-radius". For any stack handling user data, health records, or financial information. Output labels law-sourced figures (exact) vs heuristic estimates (planning only). Does not replace legal counsel.

上游 SKILL.md 主要章节（保留原文标题）：

• When to Activate
• How This Skill Works
• Execution Workflow
• Step 1 — Scope & Stack Detection
• Step 2 — Sensitive Data Inventory
• Step 3 — Data Flow Tracing
• Step 4 — Blast Radius Calculation
• Step 5 — Regulatory Impact Estimation
• Step 6 — Blast Radius Report Generation
• Step 7 — Hardening Roadmap

使用边界

先确认授权范围、资产边界和证据来源。输出用于防御性检查与人工决策，不自动执行攻击、绕过或破坏性操作。

作者、翻译与许可证

原作者

GitHub, Inc. 与 awesome-copilot contributors

中文翻译

CEOFans翻译

许可证

MIT

上游来源

https://github.com/github/awesome-copilot/tree/bbaa5872640e6cbae953beb22a71ae337398ca12/skills/data-breach-blast-radius

适用范围

平台：linux、macos、windows；标签：安全与合规、数据泄露影响面评估

安全提示

基础静态扫描不等于绝对安全。技能可能调用命令、浏览器、云服务或本地文件，请在最小权限环境中使用，高风险操作必须人工确认。

如发现侵权、许可证或安全问题，可在本页前台提交投诉，管理员复核后可立即下架。