القائمة
Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/jmagly/aiwg --skill strict-toolchain-auditيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
WCAG accessibility analysis for color palettes including contrast ratios, compliance checking, and remediation suggestions. Use when user needs to verify colors meet accessibility standards.
Generate, analyze, compare, export, and suggest color palettes using color theory. Use when user asks about colors, palettes, color schemes, or needs help choosing colors for a project.
Research current color trends from Pantone, architecture, film, and design. Use when user asks about trending colors, popular palettes, or wants research-backed color inspiration.
استنادا إلى تصنيف SOC المهني
عرض SKILL.md
| namespace | aiwg |
| name | strict-toolchain-audit |
| platforms | ["all"] |
| description | Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors |
| requires | [{"project-files":"build files or CI workflows for at least one supported language"}] |
| ensures | [{"report":"strictness gaps per language and remediation commands"},{"exit-code":"non-zero when --fail-on-missing is set and required strictness is absent"}] |
| errors | [{"no-supported-language":"no supported language/build signal detected"}] |
| invariants | ["gradual-adoption baselines are allowed only when new warnings still fail","sanitizer jobs do not count as replacement for strict compiler/linter gates"] |
| commandHint | {"argumentHint":"[--language c|cpp|rust|go|python|typescript|auto] [--fail-on-missing] [--format text|json]","allowedTools":"Read, Bash, Grep","model":"haiku","category":"security","orchestration":false,"modelRole":"efficiency","modelTier":"economy"} |
Inspect build and CI configuration for the strict-toolchain rule. This maps curl Practice 13 into a reusable AIWG security-engineering audit.
-Wall, -Wextra, -Werror, -pedantic; recommended hardening flags are reported when absent.cargo clippy -- -D warnings or equivalent CI gate.go vet ./... and staticcheck ./... fail CI.ruff check and mypy strictness are configured.strict: true and noUncheckedIndexedAccess: true.Legacy projects may keep a baseline, but the audit must confirm that new warnings fail the build. A baseline without a ratchet is reported as a finding.
agentic/code/frameworks/security-engineering/rules/strict-toolchain.mdagentic/code/frameworks/security-engineering/skills/sanitizer-in-ci/SKILL.md