القائمة
Security monitoring daemon — checks for new secrets in commits, unsafe patterns in changed files, Docker/CI drift, and policy violations. Lightweight recurring scan for /loop usage.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | sec-monitor |
| description | Security monitoring daemon — checks for new secrets in commits, unsafe patterns in changed files, Docker/CI drift, and policy violations. Lightweight recurring scan for /loop usage. |
| argument-hint | ["quick|diff|full"] |
| (default | quick) |
| allowed-tools | Bash(grep *), Bash(git *), Bash(cat *), Bash(find *), Bash(ls *), Bash(wc *), Read, Grep, Glob |
New commits since last check (secrets in diffs):
!git log --oneline -5 --diff-filter=AM --name-only
Secrets in staged/unstaged changes:
!git diff HEAD --unified=0 | grep -i "sk-\|ghp_\|Bearer \|password.*=\|api_key.*=\|token.*=" | grep -v "test\|example\|getEnv\|secrets\." | head -10
New .sh files (BANNED):
!git diff HEAD --name-only --diff-filter=A | grep "\.sh$" | head -5
Modified security-critical files:
!git diff HEAD --name-only | grep -E "(Dockerfile|\.yml|\.json|server\.zig|auth|token|secret|permission)" | head -10
Files with potential security changes:
!git diff main --name-only | grep -E "\.(zig|yml|json|toml)$" | head -20
New hardcoded strings in diff:
!git diff main -- "*.zig" | grep "^+" | grep -i "http://\|password\|secret\|0\.0\.0\.0\|chmod\|unsafe" | grep -v "^+++" | head -10
New environment variable usage:
!git diff main -- "*.zig" | grep "^+" | grep "getEnvVarOwned\|getenv" | head -10
Run /security-audit full for the complete vulnerability scan.
1. Docker image freshness:
!grep "^FROM " Dockerfile* docker/Dockerfile* deploy/Dockerfile* 2>/dev/null | head -8
2. GitHub Actions — untrusted action versions:
!grep -rn "uses:" .github/workflows/*.yml 2>/dev/null | grep -v "@v[0-9]\|@main\|@master" | head -5
3. Open ports in code:
!grep -rn "0\.0\.0\.0\|INADDR_ANY" --include="*.zig" src/ tools/ | head -5
4. File permission issues:
!find .claude .ralph .trinity -name "*.json" -perm +o+r 2>/dev/null | head -5
Based on all scan results above, output a rich emoji dashboard. Use this EXACT format (no box-drawing chars, plain monospace):
🛡️ TRINITY SECURITY MONITOR
📅 {date} ⏱️ Cycle {N}
════════════════════════════════════════
🔑 Secrets in diff ···· {count} {✅/🚨}
📜 New .sh files ······ {count} {✅/⛔}
📁 Critical files ····· {count} {✅/⚠️} {short list}
🐳 Docker images ······ {count} {✅/🔶} {pinned/STALE}
🌐 Open ports ········· {count} {✅/🔓}
📂 File permissions ··· {count} {✅/🔓}
🆕 New commits ········ {count} 📝 {summary}
⚖️ Policy violations ·· {count} {✅/❌}
════════════════════════════════════════
{status_line}
{trend_line}
Where {status_line} is one of:
🟢 CLEAN — all checks passed🟡 WARNINGS — {details}🔴 ALERT — {details}Where {trend_line} is one of:
📈 Trend: improving ({what changed})📉 Trend: degrading ({what changed})➡️ Trend: stableAfter the dashboard, add a brief 1-2 line summary in Russian.
If any ALERT found, add: 💡 Рекомендация: /security-audit full
Track these persistent issues and note when any get fixed:
This skill is designed for recurring use:
/loop 60m /sec-monitor quick
Runs every hour, checks only recent changes, fast execution (~5s).
For deeper scans before deploy: /sec-monitor full
Trinity Bridge manual — architecture, endpoints, commands, patterns for Perplexity-Railway-Mac-Claude Code channel. Reference for all AI agents.
Generate Zig or Verilog code from VIBEE specifications. Use when creating or updating .tri specs and regenerating code.
GOD MODE — Agent monitoring dashboard. Shows swarm status, task queue, pipeline compliance, circuit breakers, git activity, and rule violations.
Generate Zig or Verilog code from VIBEE specifications. Use when creating or updating .tri specs and regenerating code.
HEALER — diagnose, heal, commit dirty files, monitor junk & docs & duplicates, report honestly. Every loop = action + proof.
Agent swarm development dashboard — live Railway containers, issue queue, PR pipeline, JSONL events, pool utilization, and queue drain status. Use when checking agent dev tasks, spawning status, or monitoring issues #315-#319.