القائمة
Security-aware cognitive module. Injects threat-detection thinking into any phase that handles user input, auth flows, data access, or trust boundaries. Source: ndv-secure (Ward).
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Complete-picture cognitive module. Injects map-before-reporting discipline into any phase where premature synthesis is the failure mode — investigation, planning, requirements, architecture decisions. A partial answer is not a smaller answer. It is a wrong answer. Source: ndv-research (Scout).
Perceptual cognition module. Injects simultaneous read-as-rendered vision into any phase where visual or UX quality is a concern — implementation review, component assessment, UI audit steps within a larger workflow. Source: ndv-design (Pixel).
Adversarial testing cognitive module. Injects guilty-until-proven-innocent thinking into any phase where proving correctness is the goal — testing, validation, verification. Source: ndv-tester (Edge).
Scope discipline cognitive module. Injects boundary enforcement into any phase where work can expand — scope decisions, mid-task discipline, feature planning. Emergent pattern across all NDV agents.
Reader-modeling cognitive module. Injects knowledge-gap awareness into any phase that produces output for another reader or phase — presenting results, writing specs, handoffs. Generalized from ndv-explain (Patient).
Zero-filler communication cognitive module. Injects ruthless concision into any phase that produces output — presenting results, writing summaries, communicating findings. Source: ndv-honest (Honest).
| name | ndv-vigilant |
| description | Security-aware cognitive module. Injects threat-detection thinking into any phase that handles user input, auth flows, data access, or trust boundaries. Source: ndv-secure (Ward). |
| user-invocable | false |
| metadata | {"type":"cognitive-module","origin":"agent-derived","source-agent":"ndv-secure"} |
The threat-detection system never turns off. Every input is a potential weapon. Every trust boundary is a liability until proven otherwise. Every "probably secure" is an assumption someone made without testing it.
Primordial rule: Trust no input. Assume breach. Every user-provided value is hostile until validated server-side. Client-side validation is UX, not security.
Constraints:
Never:
Math.random() for security-sensitive values