القائمة
Verify security vulnerabilities — hardcoded secrets, SQL injection, JWT validation, sensitive logging, and authorization checks. Run before merging any auth or API-related changes.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Creates a new git branch following the project's branch naming convention. Use this skill whenever the user wants to start new work, create a branch, switch to a new branch.
Generate PR title and body from commits since the base branch, then create the PR on GitHub following the project PR template exactly.
Check PR review comments, reflect valid feedback into code, commit, push, then reply to each comment with the resolving commit hash.
Create Git commits following Flooding project conventions. Splits changes into logical units with correct type prefix and Korean description.
Run a structured checklist over changed files — Kotlin style, JPA/transaction correctness, naming conventions, test coverage, and security basics. Produces a ✓/⚠/✗ report.
Run KtLint formatting on all Kotlin source files via Gradle. Use when .kt files need formatting or after bulk edits.
| name | security-checklist |
| description | Verify security vulnerabilities — hardcoded secrets, SQL injection, JWT validation, sensitive logging, and authorization checks. Run before merging any auth or API-related changes. |
grep -r "password.*=.*\"" --include="*.kt" src/
grep -r "secret.*=.*\"" --include="*.kt" src/
grep -r "password\|secret\|jwt" --include="*.yml" --include="*.yaml" src/
CurrentUserProvider.getCurrentUser() used instead of accepting userId from request body?For each item:
Final summary: {n} items — {p} passed, {w} warnings, {e} errors