REPOGEO REPORT · LITE
tanweai/wooyun-legacy
Default branch main · commit 910450a3 · scanned 6/26/2026, 12:42:35 AM
GitHub: 1,721 stars · 356 forks
Score trend below includes all ready runs (older left, newer right; scroll horizontally if needed). The table is collapsed by default—expand for newest-first rows, 10 per page.
3 ready scans. Expand the table below for newest-first rows (10 per page, paginated).
Action plan is what to do next — copy-pasteable changes prioritized by impact. Category visibility is the real GEO test: when a user asks an AI a brand-free question that should surface tanweai/wooyun-legacy, does the AI actually recommend you — or your competitors? Objective checks verify the metadata signals AI engines weight first. Self-mention check detects whether AI even knows you exist by name.
Action plan — copy-paste fixes
3 prioritized changes generated by gemini-2.5-flash. Mark items done after you ship the fix.
- hightopics#1Add specific topics to improve categorization
Why:
COPY-PASTE FIXclaude-plugin, ai-security, vulnerability-data, security-reports, llm-security, historical-vulnerabilities, business-logic-vulnerabilities
- highreadme#2Strengthen the README's opening sentence to emphasize its AI plugin nature and purpose
Why:
CURRENT**WooYun Legacy** 是一个 Claude Code 插件,基于 WooYun(2010-2016)收录的 22,132 个业务逻辑漏洞案例,为 Claude 的安全测试输出注入**真实公司案例引用**、**量化统计数据**和**数据驱动的测试优先级排序**。
COPY-PASTE FIX**WooYun Legacy** 是一个专为 Claude Code 设计的插件,旨在通过注入 WooYun(2010-2016)收录的 22,132 个业务逻辑漏洞案例,显著增强 AI 生成的安全报告,提供**真实公司案例引用**、**量化统计数据**和**数据驱动的测试优先级排序**。
- mediumreadme#3Clarify the existing license(s) in the README
Why:
COPY-PASTE FIX## License This project is licensed under [describe the actual license(s) here, e.g., 'a custom license combining elements of X and Y,' or 'the terms specified in the LICENSE file']. Please refer to the [LICENSE](LICENSE) file for full details.
Category GEO backends resolved for this scan: google/gemini-2.5-flash, deepseek/deepseek-v4-flash
Category visibility — the real GEO test
Brand-free queries asked to google/gemini-2.5-flash. Did AI recommend you, or someone else?
Same questions for every model — switch tabs to compare answers and rankings.
- MITRE ATT&CK for AI · recommended 1×
- OWASP Top 10 for LLM Applications · recommended 1×
- OWASP Top 10 for Machine Learning · recommended 1×
- CVE Database · recommended 1×
- NIST AI Risk Management Framework · recommended 1×
- CATEGORY QUERYHow to add real-world vulnerability examples and statistics to AI security assessments?you: not recommendedAI recommended (in order):
- MITRE ATT&CK for AI
- OWASP Top 10 for LLM Applications
- OWASP Top 10 for Machine Learning
- CVE Database
- NIST AI Risk Management Framework
- arXiv
- Google Scholar
- AI Incident Database
- Google AI Security
- Microsoft AI Security
AI recommended 10 alternatives but never named tanweai/wooyun-legacy. This is the gap to close.
Show full AI answer
- CATEGORY QUERYTool to improve AI-generated security reports with historical vulnerability data and impact analysis?you: not recommendedAI recommended (in order):
- VulnCheck Xchange
- Kenna Security
- Nucleus Security
- Recorded Future
- Tenable.io
- Qualys VMDR
- OWASP DefectDojo (DefectDojo/django-DefectDojo)
AI recommended 7 alternatives but never named tanweai/wooyun-legacy. This is the gap to close.
Show full AI answer
Objective checks
Rule-based audits of metadata signals AI engines weight most.
- Metadata completenesswarn
Suggestion:
- README presencepass
Self-mention check
Does AI even know your repo exists when asked about it directly?
- Compared to common alternatives in this category, what is the core differentiator of tanweai/wooyun-legacy?passAI named tanweai/wooyun-legacy explicitly
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?
- If a team adopts tanweai/wooyun-legacy in production, what risks or prerequisites should they evaluate first?passAI named tanweai/wooyun-legacy explicitly
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?
- In one sentence, what problem does the repo tanweai/wooyun-legacy solve, and who is the primary audience?passAI did not name tanweai/wooyun-legacy — likely talking about a different project
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?
Embed your GEO score
Drop this badge into the README of tanweai/wooyun-legacy. It auto-updates whenever the report is rescanned and links back to the latest report — easy public proof that you care about AI discoverability.
[](https://repogeo.com/en/r/tanweai/wooyun-legacy)<a href="https://repogeo.com/en/r/tanweai/wooyun-legacy"><img src="https://repogeo.com/badge/tanweai/wooyun-legacy.svg" alt="RepoGEO" /></a>Subscribe to Pro for deep diagnoses
tanweai/wooyun-legacy — Lite scans stay free; this card itemizes Pro deep limits vs Lite.
- Deep reports10 / month
- Brand-free category queries5 vs 2 in Lite
- Prioritized action items8 vs 3 in Lite