القائمة
Run security scans and write a security evidence report.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Enforce architecture boundaries using dependency-cruiser and generate a dependency graph.
Synchronise work with Beads (bd). Ensure current work is tracked, linked, and committed as evidence.
Run deterministic browser QA using agent-browser. Produce QA report + trace/screenshot evidence.
Run the full local quality gate suite and write a merge-evidence report to reports/quality/.
Run a formal inspection-style review (Fagan) using a checklist, producing a merge-blocking review record.
| name | security-scan |
| description | Run security scans and write a security evidence report. |
| disable-model-invocation | true |
| argument-hint | [mode=pr|nightly] |
| allowed-tools | Read, Grep, Glob, Bash(npm audit *), Bash(npm sbom *) |
reports/security/SECURITY_REPORT.mdreports/security/sbom.jsonnpm audit --audit-level=high — report vulnerabilities.npm sbom --sbom-format cyclonedx > reports/security/sbom.jsonsemgrep --config p/ci src/ — fail on findings.reports/security/SECURITY_REPORT.md summarising: