القائمة
Automatic security scanning on every code change with CWE/OWASP mapping
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Analyze, group, and commit uncommitted changes as atomic conventional commits. Use this skill whenever the user says 'commit', 'commit this', 'commit these changes', 'commit my changes', 'smart commit', wants their diff split into logical commits, or asks to create a commit in any way. Always use this skill for committing — never run git commit directly.
Audit Claude Code configuration for security: check permissions, hooks, MCP servers, and settings
Create or update today's daily note at `~/knowledge/notes/journal/YYYY/MM-MMM/YYYY-MM-DD-DayName.md`, appending or replacing a session entry under `## Agent Summary`. Use when the user asks to update the daily note, log a session, append to the journal, or when invoked by the session-history hook after a session summary is written.
Edit config files inside the stow-based dotfiles repo and re-stow them with `make link`. Use this skill whenever the user asks to modify, add, or tweak any config under `$HOME` that lives in dotfiles — `.zshrc`, `.zshenv`, `.zprofile`, anything under `.config/`, `.local/`, `.claude/`, `.kiro/`, `.meshclaw/`, `.aws/`, `.unison/`, the `Makefile`, or any other tracked dotfile. Trigger even if the user phrases it as "change my config", "update my zshrc", "add this to claude settings", "tweak my tmux config", "modify my aliases", etc. — direct edits to `$HOME` are wrong because they bypass version control and get clobbered by the next `make link`.
Summarize unread emails via Outlook MCP, group by priority, draft replies
Audit IAM policies in CDK/CloudFormation/Terraform for least-privilege violations
| name | security-gate |
| description | Automatic security scanning on every code change with CWE/OWASP mapping |
| effort | medium |
| hooks | {"PostToolUse":[{"matcher":"Write|Edit","type":"command","command":"echo 'Security gate: review the file that was just written/edited for common vulnerabilities and report any findings with CWE/OWASP references'"}]} |
This skill provides continuous security scanning as you code. It activates automatically after every Write or Edit operation.
When a file is written or edited, automatically:
Security: 1 warning in auth_handler.py
- [CWE-20] Input not validated on line 45 — add server-side validation
eval/exec of untrusted input (CWE-95)