القائمة
Use before releases or after dependency updates to run security checks — cargo-audit, ASVS compliance matrix review, clippy security lints, redaction pattern verification.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when adding a new MCP tool to the RAPS MCP server — covers tool schema definition, handler implementation, dispatch registration, and the client accessor pattern.
Use when adding a new CLI command or subcommand to RAPS — covers the clap struct pattern, module wiring, output formatting, and test structure across the 10-crate workspace.
Use when new RAPS features ship and LinkedIn content is needed — adds posts to the raps-smm post bank following established tone, format, and hashtag conventions.
Use when bumping the RAPS version for a new release — updates Cargo.toml workspace version, 9 internal crate dependencies, 6 npm package.json files, creates git tag, and triggers the release workflow.
Use when adding or updating CI/CD integrations in the raps-actions repo — GitHub Actions composite actions, GitLab CI include templates, test workflows, and floating tag management.
Use when you need to create a shortened URL at go.rapscli.xyz — for long Cloudflare OAuth links, wrangler login URLs, or any URL that's unwieldy in the terminal.
| name | raps-security-audit |
| version | 1.0 |
| description | Use before releases or after dependency updates to run security checks — cargo-audit, ASVS compliance matrix review, clippy security lints, redaction pattern verification. |
Run security checks and update compliance documentation.
Repo: /root/github/raps/raps
Docs: docs/security/
cargo audit # Known vulnerabilities
cargo deny check # License + advisory check
cargo clippy --workspace --all-features -- -D warnings
Key clippy lints to watch for:
clippy::unwrap_used — potential panicsclippy::expect_used — same# Verify log redaction patterns work
cargo test -p raps-kernel logging
cargo test -p raps-kernel security
Redaction covers: Bearer tokens, Basic auth, Cookie headers, X-API-Key, URL ?access_token= / ?apikey= params.
cargo test -p raps-kernel security
Tests: ../../etc/passwd -> passwd, empty string -> Err, .. alone -> Err, NUL bytes stripped, unicode preserved, validate_path_within rejects escape.
File: docs/security/asvs-l2-compliance-matrix.md
Format:
| ID | Requirement | Status | Evidence | Notes |
|----|-------------|--------|----------|-------|
| V2.1 | OAuth uses PKCE | Met | `auth/device_code.rs:37` | RFC 7636 compliant |
Statuses: Met, Partial, Gap, N/A
Update when:
| File | Scope |
|---|---|
asvs-l2-compliance-matrix.md | ASVS 4.0.3 L2 controls |
asvs-v2-auth-audit.md | Authentication (PKCE, CSRF, token storage) |
asvs-v5-v12-input-files-audit.md | Input validation, file handling |
asvs-v6-v9-crypto-comms-audit.md | Cryptography, communications |
asvs-v7-logging-audit.md | Error handling, logging |
plugin-trust-model.md | Plugin security |
gdpr-privacy-statement.md | GDPR compliance |
nist-ssdf-mapping.md | NIST SSDF mapping |
soc2-tsc-self-assessment.md | SOC 2 Type II |
cargo audit and cargo deny checkcargo clippy --workspace --all-features -- -D warningscargo test -p raps-kernel security logging)docs/security/