break

Search the BREAK business risk knowledge base locally via a zero-dependency Node.js engine.

382|75|Updated Oct 17, 2022
One-click install
npx skills add https://github.com/JDArmy/BREAK --skill break-jdarmy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: break
Source: https://github.com/JDArmy/BREAK
Command: npx skills add https://github.com/JDArmy/BREAK --skill break-jdarmy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve? Security analysts and risk-control teams need fast local access to the JDArmy BREAK knowledge base (risks, avoidances, attack tools, threat actors, terms, cases) without querying the online site or loading the full web app. ## Core Features & Use Cases - Local Knowledge Search: Query 400 risks, 350 avoidance measures, 125 attack tools, 83 threat actors, 657 terms, and 1781 cases using the zero-dependency break_search.mjs Node.js script. - Bilingual Support: Search in Chinese or English via --lang zh|en, filter by entity type with --type, and fetch full entity details by ID (e.g., R0001) with --detail. - Use Case: A blue-team analyst assessing credential-stuffing exposure runs a local search for "credential stuffing" in English, retrieves the matching risk entry, its avoidance measures, and linked real-world cases to plan mitigations. ## Quick Start Ask the agent to search the BREAK knowledge base for a business risk such as credential stuffing and show the matching risk entry with its avoidance measures.

Frequently Asked Questions about break

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I search the BREAK knowledge base locally?

Run node scripts/skill/break_search.mjs with your query after generating data via npm run export:data. Add --lang en for English, --type risks,avoidances to filter entity types, or --detail with an ID like R0001 for full entry details.

What data does the BREAK skill contain?

The knowledge base catalogs 400 risk items, 350 avoidance measures, 125 attack tools, 83 threat actors, 657 industry terms, 20 business domains, and 1781 real-world cases, each with definitions, descriptions, references, and cross-entity relationships.

Does the BREAK search script require external dependencies?

No, break_search.mjs is a zero-dependency Node.js script requiring only Node.js 24 or later. You must first run npm run export:data and export:data-en to generate the Chinese and English static data bundles it reads.

Can I use the BREAK skill outside this repository?

Yes, run scripts/skill/package_skill.sh to build dist/break-skill, a distributable directory containing SKILL.md, SKILL_en.md, the search script, and generated data bundles. Copy that directory into any compatible agent's Skill directory.

What is the difference between a business risk and a vulnerability in BREAK?

Vulnerabilities stem from coding defects fixable by code changes, while business risks are unintended exploitations of normal business logic. BREAK focuses on business risks, which require security capabilities and risk-control models rather than direct code fixes.