القائمة
Aggregated security context for a scope — STRIDE threats + OWASP refs + NIST controls + prior threat-model docs. PURE data; the Security persona is in the parent agent's prompt.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Append one hash-chained audit event to okrs/<id>/audit/events/<run-id>.jsonl. Returns the new chain head.
Replay the hash chain over an existing audit JSONL; returns the chain head on success, the first integrity failure reason on failure.
Query the mesh's threat library for entries matching a concern (e.g. "identity", "data-licensing").
Academic paper search via arXiv. Returns ranked paper results per query envelope.
Aggregated architecture context for a scope — CALM nodes + ADRs + fitness functions + quality attributes. PURE data; the Architect persona is in the parent agent's prompt.
Aggregated quality context for a scope — quality attribute definitions + performance SLOs + reliability targets per BAR.
| name | context-security |
| description | Aggregated security context for a scope — STRIDE threats + OWASP refs + NIST controls + prior threat-model docs. PURE data; the Security persona is in the parent agent's prompt. |
| version | 0.1.0 |
| purity | pure-data |
| runtime | research-runner |
| command | npx @maintainabilityai/research-runner@~0.1.64 skill-context-security |
The security-side companion to context-architecture. Walks the mesh and assembles the structured-data input the Security persona reasons against.
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
platformId | string | yes | — | Platform to aggregate over. |
barIds | string[] | yes | — | BARs to aggregate over. |
| Field | Type | Description |
|---|---|---|
ok | boolean | |
threats | ThreatEntry[] | STRIDE entries applicable to the scope. |
securityControls | SecurityControl[] | Already-in-place controls per BAR. |
owaspRefs | { category: "A0X", description }[] | OWASP A01-A10 references the in-scope BARs map to. |
nistControls | { id, family, description }[] | NIST 800-53 control refs. |
priorThreatModels | { barId, path, lastReviewed }[] | Existing threat-model docs to ground against. |
echo '{"platformId":"PLT-IMDB","barIds":["APP-IMDB-002"]}' \
| npx @maintainabilityai/research-runner@~0.1.64 skill-context-security
Aggregates from threats/, controls/, each BAR's security/, and compliance-checklist.yaml. CLI subcommand backend lands in B-PR1a.
{ok: false, reason: 'mesh-walk-failed'} only on filesystem errors. Sparse BARs return ok: true with empty arrays — this is by design and drives the Restricted tier.