القائمة
Context-aware security audit based on OWASP Top 10. Scans for vulnerabilities in code and configuration. Includes proactive secret scanning for API keys and credentials.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | security-scan |
| description | Context-aware security audit based on OWASP Top 10. Scans for vulnerabilities in code and configuration. Includes proactive secret scanning for API keys and credentials. |
Merged: security-scan + secret-guard.
Proactively scan for leaked secrets:
sk_live_, AKIA, ghp_BEGIN RSA PRIVATE KEY, PEM filespostgres://, mysql:// with credentials.env files committed to version control.env files not in .gitignore.Enforces modularity, reusability (DRY), and high-level architectural patterns. Focuses on SOLID principles, Design Patterns, and Scalability.
Universal architectural auditor for any tech stack. Enforces Separation of Concerns, Clean Architecture, and best practices by identifying the project structure and detecting layer violations.
Defines rules for skill activation, including input requirements, output contracts, conflict lists, and performance costs. Enforces Lean Execution mode by default.
Implementation of Enterprise patterns: CQRS, Event Sourcing, Domain-Driven Design (DDD).
Generates robust, production-grade 3rd party API integrations with Retry, Rate Limiting, and DTOs.
Workflow for deeply researching and architecting a new module/feature. STRICTLY NO CODE EXAMPLES. Use this for high-level technical design and research before implementation.