القائمة
Run Sprint Retrospective focused on DevSecOps pipeline optimization, security feedback loops, and scan performance
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
استنادا إلى تصنيف SOC المهني
| name | retro-pipeline-review |
| description | Run Sprint Retrospective focused on DevSecOps pipeline optimization, security feedback loops, and scan performance |
Invoke during Sprint Retrospective to review DevSecOps pipeline performance.
# Sprint [N] — Pipeline Retrospective
## Pipeline Metrics This Sprint
- Total pipeline time: [X min] (target: < 30 min)
- SAST scan time: [X min]
- DAST scan time: [X min]
- False positive rate: [X%] (target: < 15%)
- Pipeline failures: [X] (root causes: [list])
## What Went Well
- [e.g., "SAST caught SQL injection before code review"]
## What Needs Improvement
- [e.g., "DAST scan taking 15 min, slowing feedback"]
## Action Items for Next Sprint
| # | Action | Owner | Expected Impact |
|---|--------|-------|----------------|
| 1 | [Action] | [Name] | [Impact] |
## Security Knowledge Gaps Identified
- [e.g., "Team needs training on secure deserialization"]