القائمة
Phase 5 (Review) namespace meta-skill — injection, malicious-code, citations, RTC.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when: checking spec-vs-code fidelity, finding orphaned acceptance criteria, finding orphaned tests, detecting stale specifications, running sdd analyze drift, auditing traceability health
Distil a raw brief/brain-dump/ticket into a 5-field intent kernel ready to seed Phase 1 spec (Wave 27 §26
Author and tighten .sdd-modules/policy.yaml; resolve extends chains; choose allow/deny lists; verify with sdd doctor --policy-preflight (Wave 26 §25 #1).
Phase 3 (Architect) namespace meta-skill — REST, async messaging, ADR, hexagonal.
Diagnostic namespace meta-skill — module verify, drift, hidden Unicode, sizing.
Phase 4 (Implement) namespace meta-skill — TDD, hotspot review, commit hygiene.
| name | sdd-review |
| namespace | true |
| keyword-tags | ["injection","malicious-code","source-verification","citation","rtc","return-to-context","supply-chain","secrets","security-review"] |
| description | Phase 5 (Review) namespace meta-skill — injection, malicious-code, citations, RTC. |
Purpose: lightweight router for Phase 5 review work.
| Trigger keywords | Sub-skill | Purpose |
|---|---|---|
injection, prompt injection, untrusted input | (uses injection-scan instruction) | Injection scanning is in injection-scan.instructions.md |
malicious, obfuscated, eval, dynamic load | malicious-code-detection | Detect malicious code patterns |
supply-chain, dependency, lockfile, transitive | supply-chain-risk | Supply-chain risk assessment |
secret, credential, api key, token | secrets-scan | Scan for secret leakage |
citation, source, claim, external knowledge | source-citation-check / source-verification | Verify cited sources |
rtc, return-to-context, reasoning | (uses rtc-reasoning instruction) | RTC reasoning is in rtc-reasoning.instructions.md |
stub, placeholder, TODO, not implemented | stub-scan | Detect stub/placeholder code left in the diff (Wave 24) |
red-team review, adversarial review | red-team-spec | Adversarial review |
secrets-scan and injection-scan on every diff — non-negotiable.supply-chain-risk whenever dependencies change.source-citation-check when external claims appear in the diff or spec.escalation-protocol.