القائمة
Read a codebase and a related issue or diff, identify the root cause of a security bug, and produce a structured report. Operates on a read-only mount; never modifies the target tree.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Given a proposed patch and a target codebase, write a failing test that demonstrates the bug, apply the patch, run the test suite, and report whether the new test passes and no other tests regress. Never edits existing test files.
Reproduce a known vulnerability inside a stripped sandbox container with no network egress and no host filesystem access. Used to validate severity claims before responsible disclosure. Refuses targets the caller does not own.
| name | vulnerability_triage |
| description | Read a codebase and a related issue or diff, identify the root cause of a security bug, and produce a structured report. Operates on a read-only mount; never modifies the target tree. |
The caller provides a path to source code and (optionally) an issue, CVE id, or commit diff. You produce a report identifying root cause, affected files, severity, and a proposed fix.
security-policy.json allowlist./workspace/proposals/<short-name>.patch — never to the target tree.{
"summary": "string",
"root_cause": "string",
"affected_files": ["string"],
"severity": "low|medium|high|critical",
"severity_justification": "string",
"proposed_patch_path": "string (under /workspace/proposals/)",
"complexity_justification": "string|null",
"tool_nonces_used": ["string"]
}