القائمة
Audit dependencies for vulnerabilities and scan for committed secrets. Use periodically or when security alerts flag a dependency.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Create well-structured atomic commits with conventional commit messages. Use when ready to commit working changes.
Write a feature spec from requirements in .claude/input/. Use when starting a new feature, before implementation begins.
Orchestrate the full spec → implement → review → fix → commit pipeline. Use when shipping a complete feature end-to-end.
Break a concept document, draft, or product brief into independent PRDs that each feed into /ship. Use when input contains multiple features or a big-picture vision.
Ship decomposed PRDs in parallel. Analyzes file conflicts, groups into batches, runs /ship in isolated worktrees, merges results. Use after /decompose.
Implement a feature from a spec file in .claude/specs/. Use after a spec is written and approved.
| name | audit |
| description | Audit dependencies for vulnerabilities and scan for committed secrets. Use periodically or when security alerts flag a dependency. |
| disable-model-invocation | true |
| effort | medium |
Check for and fix vulnerable dependencies.
Steps:
gitleaks is available: which gitleaks || gitleaks versiongitleaks detect --verbose --redactpackage-lock.json or npm-shrinkwrap.json → npmyarn.lock → yarnpnpm-lock.yaml → pnpmbun.lockb → bunPipfile.lock or poetry.lock → Python (pip-audit / poetry)Cargo.lock → Rust (cargo audit)go.sum → Go (govulncheck)npm audit fix, poetry update, cargo update)npm audit fix --force) without explicit user approval — report them instead