القائمة
Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Load prompts from external files with path expansion.
SSE, WebSockets, LLM token streaming patterns.
Visual review pipeline for UI components.
Atomic commits, conventional commits, trunk-based development
Implement in thin vertical slices — one commit per task, testable, rollback-safe
Define requirements via spec-first before any code — PRD, edge cases, acceptance criteria
| name | security-hardening |
| description | Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit |
Código inseguro em produção = pesadelo. Isso é não-negociável.
| Domain | Coverage |
|---|---|
| SAST | SQL injection, XSS, CSRF, path traversal, command injection |
| MCP | Credential leakage prevention, tool access control, input sanitization |
| Secrets | No hardcoded keys, tokens, passwords in code/logs |
| Deps | Known CVEs, outdated packages, deprecated libs |
| Container | Non-root user, health checks, minimal base images |
mcp_tools YAML fieldpip-audit --requirement requirements.txt
npm audit