القائمة
Triage Jira issues, refine user stories with security stories, and manage risk-weighted backlog prioritization
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
| name | backlog-management |
| description | Triage Jira issues, refine user stories with security stories, and manage risk-weighted backlog prioritization |
Invoke for sprint planning, backlog refinement, or security story prioritization.
The Product Owner balances Feature Velocity against Security Debt:
For each Sprint, the PO uses this framework:
Security Debt Score = Σ (vulnerability_severity × exposure_days × affected_users)
- Critical: 10 pts, High: 5 pts, Medium: 2 pts, Low: 1 pt
- Exposure multiplier: days since discovery / 30
Feature Value Score = business_impact × user_reach × revenue_potential
- Scale: 1-10 for each factor
Sprint Priority = items with highest (Feature Value - Security Debt Risk)
- Exception: Critical/High security debt ALWAYS takes priority