REPOGEO 报告 · LITE
kac89/vulnrepo
默认分支 master · commit e5b7aa0e · 扫描时间 2026/6/14 15:26:46
星标 559 · Fork 118
行动计划告诉你下一步要做什么——按影响力排序、可直接复制粘贴的修改。品类可见性是真正的 GEO 测试:当用户向 AI 提一个不带品牌、本应让 kac89/vulnrepo 浮出水面的问题时,AI 是真的推荐了你,还是推荐了你的竞品?客观检查验证 AI 引擎最先权衡的那些元数据信号。自指检查判断 AI 是否还认识你的名字。
行动计划 — 可复制粘贴的修复
3 条由 gemini-2.5-flash 生成、按优先级排序的修改。修完后请把对应条目标记为完成。
- highreadme#1Explicitly clarify repo's purpose in README's opening
原因:
当前A client-side, privacy-first vulnerability report manager for security professionals. All data is encrypted and stored locally in your browser — nothing is sent to any server by default.
复制粘贴的修复VULNRΞPO is a client-side, privacy-first vulnerability report manager for security professionals. **It is NOT a deliberately vulnerable application for testing or learning; it is a tool to help you manage and generate reports for your own security findings.** All data is encrypted and stored locally in your browser — nothing is sent to any server by default.
- mediumtopics#2Add more specific topics for vulnerability reporting and management
原因:
当前asvs, bugbounty, burpsuite, end-to-end-encryption, hacking, nessus, ollama, openvas, owasp, pci-dss, pentest-report, pentesting, reporting, reporting-tool, security, security-tool, semgrep, trivy, vulnerabilities, zaproxy
复制粘贴的修复asvs, bugbounty, burpsuite, end-to-end-encryption, hacking, nessus, ollama, openvas, owasp, pci-dss, pentest-report, pentesting, reporting, reporting-tool, security, security-tool, semgrep, trivy, vulnerabilities, zaproxy, vulnerability-management, vulnerability-reporting, pentest-reporting-tool, security-reporting-platform
- lowreadme#3Add a 'Comparison' or 'Differentiators' section to the README
原因:
复制粘贴的修复Add a new section, perhaps titled 'Why VULNRΞPO? (Not a Vulnerable App!)' or 'Comparison to Other Tools', with content like: 'Unlike projects such as OWASP Juice Shop, WebGoat, or DVWA, VULNRΞPO is not a deliberately vulnerable application designed for security testing practice. Instead, it is a robust, privacy-first tool built to help security professionals efficiently manage, generate, and encrypt their vulnerability reports from various scanner inputs.'
本次扫描解析到的品类 GEO 通道:google/gemini-2.5-flash, deepseek/deepseek-v4-flash
品类可见性 — 真正的 GEO 测试
向 google/gemini-2.5-flash 提出的不带品牌问题。AI 推荐了你,还是推荐了别人?
各模型使用同一组问题 — 切换标签对比回答与排名。
- Drata · 被推荐 1 次
- Adobe Acrobat Pro · 被推荐 1 次
- Foxit PhantomPDF · 被推荐 1 次
- cryptpad/cryptpad · 被推荐 1 次
- Microsoft Word · 被推荐 1 次
- 品类问题What are good tools for generating pentest reports with end-to-end encryption?你:未被推荐AI 推荐顺序:
- Drata
- Adobe Acrobat Pro
- Foxit PhantomPDF
- CryptPad (cryptpad/cryptpad)
- Microsoft Word
- LibreOffice Writer
- Gpg4win
- GPGTools
- ProtonMail
- Tutanota
- SpiderFoot HX
AI 推荐了 11 个替代方案,却始终没点名 kac89/vulnrepo。这就是要补上的差距。
查看 AI 完整回答
- 品类问题How can I consolidate vulnerability findings from multiple scanners into a single report?你:未被推荐AI 推荐顺序:
- DefectDojo (DefectDojo/django-DefectDojo)
- Kenna Security (Cisco Vulnerability Management)
- ThreadFix
- Faraday (infobyte/faraday)
- VulnWhisperer (vulnwhisperer/vulnwhisperer)
- Microsoft Defender for Cloud (Azure Security Center)
AI 推荐了 6 个替代方案,却始终没点名 kac89/vulnrepo。这就是要补上的差距。
查看 AI 完整回答
客观检查
针对 AI 引擎最看重的元数据信号的规则审计。
- Metadata completenesspass
- README presencepass
自指检查
当被直接问到你时,AI 是否还知道你的仓库存在?
- Compared to common alternatives in this category, what is the core differentiator of kac89/vulnrepo?passAI 明确点名了 kac89/vulnrepo
AI 的回答可能信誓旦旦却是错的。请按事实核对:技术栈、目标人群、差异化点是不是和你实际的对得上?
- If a team adopts kac89/vulnrepo in production, what risks or prerequisites should they evaluate first?passAI 明确点名了 kac89/vulnrepo
AI 的回答可能信誓旦旦却是错的。请按事实核对:技术栈、目标人群、差异化点是不是和你实际的对得上?
- In one sentence, what problem does the repo kac89/vulnrepo solve, and who is the primary audience?passAI 未点名 kac89/vulnrepo —— 很可能在说另一个项目
AI 的回答可能信誓旦旦却是错的。请按事实核对:技术栈、目标人群、差异化点是不是和你实际的对得上?
嵌入你的 GEO 徽章
把这个徽章贴进 kac89/vulnrepo 的 README。每次重新扫描都会自动更新,并跳到最新报告——是「我在乎 AI 可发现性」最简单的公开证明。
[](https://repogeo.com/zh/r/kac89/vulnrepo)<a href="https://repogeo.com/zh/r/kac89/vulnrepo"><img src="https://repogeo.com/badge/kac89/vulnrepo.svg" alt="RepoGEO" /></a>订阅 Pro,解锁深度诊断
kac89/vulnrepo — 轻量扫描仍免费;本卡列出 Pro 相对轻量的深度额度。
- 深度报告每月 10 次
- 无品牌品类查询5,轻量 2
- 优先行动项8,轻量 3