القائمة
Atomic skill — detect secrets, credentials, and sensitive strings in code and config (invoke before broader security-scan)
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | secrets-detector |
| description | Atomic skill — detect secrets, credentials, and sensitive strings in code and config (invoke before broader security-scan) |
| model | sonnet-4-6 |
| token_budget | {"input":4000,"output":2000} |
Single responsibility: find exposed secrets and credential material.
Does not: OWASP AppSec audit, dependency CVEs, crash analysis — use security-scan for the full pass.
security-scan (frontend/backend) should start with or reference this skill for the secrets slice to avoid duplicating detection logic in prompts.Generate Sprint Stories from Master Story + sprint scope — ADO-ready PRD lift, UI/Figma, non-redundant sections
Generate Master Stories (feature-level) from PRD — for Sprint Stories use sprint-story-generator; for tech tasks use tech-task-generator
Understands natural English language queries and converts them to SDLC commands. Supports hybrid pattern matching + AI understanding. Asks for ADO work item if missing, shows non-closed items for quick selection. Works with any stage, any role.
One-command setup for AI-SDLC IDE Plugin. Installs dependencies, creates env, bootstraps .sdlc/, wires Claude Code commands, Cursor MCP, and validates everything.
Security validation for Java/TEJ/Spring backend code
Backend developer skill for Java 17, TEJ, RestExpress, Kafka, Gradle, PostgreSQL