Run any Skill in Manus with one click

defect-taxonomy

Stars6

Forks2

UpdatedJuly 26, 2026 at 13:02

Comprehensive defect taxonomy knowledge base - 16 macro-categories, 140+ subcategories of source code defects with CWE/OWASP mappings, detection strategies, fix patterns, and review frameworks. Used by senior-review agents (code-auditor, security-auditor, ui-race-auditor) to enrich analysis with structured defect knowledge.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

acaprino

acaprino/claude-code-daodan

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software Quality Assurance Analysts and TestersComputer and Mathematical Occupations·SOC 15-1253

File Explorer

10 files

SKILL.md

readonly

name	defect-taxonomy
description	Comprehensive defect taxonomy knowledge base - 16 macro-categories, 140+ subcategories of source code defects with CWE/OWASP mappings, detection strategies, fix patterns, and review frameworks. Used by senior-review agents (code-auditor, security-auditor, ui-race-auditor) to enrich analysis with structured defect knowledge.

Defect Taxonomy Knowledge Base

Unified classification of source code defects synthesizing MITRE CWE, OWASP Top 10, NASA Power of 10, IBM ODC, IEEE 1044, and Beizer's taxonomy into actionable detection references.

Reference Files

Load relevant references based on the code domain under review. Do NOT load all files -- select only what applies.

Taxonomy References (defect patterns)

Reference	When to load
`references/concurrency-state.md`	Concurrent/parallel code, shared state, async patterns, closures, variable scoping
`references/logic-types.md`	Comparisons, boolean logic, type conversions, generics, serialization
`references/memory-resources.md`	Memory management (C/C++/Rust), resource lifecycle, error handling, performance bottlenecks
`references/security.md`	Security review -- injection, auth, crypto, secrets, CORS, SSRF, input validation
`references/distributed-integration.md`	Microservices, APIs, distributed state, message queues, service mesh, migrations
`references/data-design-ops.md`	Database/ORM, design patterns, build/deploy, testing, observability
`references/detection-matrix.md`	Cross-cutting: detection channels per category, language-weighted focus, ROI prioritization

Review Frameworks (analysis methodology)

Reference	When to load
`references/review-frameworks.md`	Always load for code-auditor. Contains cognitive models, failure flow methodology, anti-pattern checklist, mental models, severity/scoring system

Language-Weighted Category Focus

C/C++: concurrency-state.md + memory-resources.md (categories 1, 5)
JVM (Java/Kotlin/Scala): concurrency-state.md + logic-types.md + memory-resources.md (categories 2, 7, 8)
JavaScript/TypeScript: concurrency-state.md + logic-types.md + security.md (categories 2, 4, 6)
Python: logic-types.md + security.md + memory-resources.md (categories 4, 6, 7)
Go/Rust: concurrency-state.md + memory-resources.md (categories 1, 5, 7)
Microservices (any): distributed-integration.md + data-design-ops.md (categories 8-12)

Usage Instructions

Identify the language(s) and domain of the code under review
Load the review-frameworks.md reference (for code-auditor agent)
Load 1-3 taxonomy references matching the language/domain
Apply detection strategies from the loaded references during analysis
Map findings to CWE identifiers where applicable
Use the detection-matrix.md to prioritize detection approach

More from this repository

same repository

grabber-development

acaprino/claude-code-daodan

Comprehensive Python web scraping knowledge base covering stealth browser automation (Patchright, Camoufox, Nodriver), TLS/HTTP fingerprint impersonation (curl_cffi, primp), anti-bot bypass (Cloudflare, DataDome, PerimeterX), CAPTCHA solving, proxy architecture, AI-assisted extraction (Crawl4AI, Firecrawl, ScrapeGraphAI), framework selection (Scrapy, Crawlee), rate limiting, and production observability. TRIGGER WHEN: building, implementing, writing, coding, creating, optimizing, or debugging Python web scrapers. DO NOT TRIGGER WHEN: the task is outside the specific scope of this component.

2026-07-266

brand-naming

acaprino/claude-code-daodan

Brand naming strategist - generates, filters, scores, and validates brand names through a lateral thinking workflow. Uses 4 lateral thinking techniques (semantic collision, vocabulary shift, invisible hinge, polarization) for creative generation, then filters with 7 naming archetypes, linguistic/phonotactic rules, weighted scoring, domain availability checks, market saturation analysis (existing apps, websites, businesses with same name), trademark pre-screening, and SEO analysis. TRIGGER WHEN: "brand name", "naming", "name my app", "name my product", "product name", "startup name", "come up with a name", "nome del brand", "naming strategico". DO NOT TRIGGER WHEN: the task is outside the specific scope of this component.

2026-07-266

worktree-manager

acaprino/claude-code-daodan

Proactive git worktree orchestration - detects WIP state (uncommitted changes, stashes, unpushed commits) and offers to isolate work into worktrees. MUST activate BEFORE any implementation task (add, create, build, implement, develop, make, fix, refactor) when the working directory has uncommitted changes or stashes. Also provides dashboard, context recovery, multi-worktree creation, cleanup advisor, and conflict early warning across parallel development sessions. Triggers: any implementation request when WIP exists, "show my worktrees", "what am I working on", "help me manage parallel tasks", "worktree status", "coordinate my work". TRIGGER WHEN: before any implementation task (add, create, build, fix, refactor) when the working directory has uncommitted changes, stashes, or unpushed commits; when the user asks about worktrees, branches, or parallel development. DO NOT TRIGGER WHEN: the repo state is clean and the user is doing a single-file read-only task.

2026-07-266

generate-mindmap

acaprino/claude-code-daodan

"Brainstorm and generate a Buzan-style structured mindmap JSON outline from any content. Use this skill whenever the user asks to create a mind map, mappa mentale, concept map, or visual summary. The skill prioritizes COGNITIVE EFFECTIVENESS over structural efficiency: it uses single keywords, strong visual associations (emojis), organic radiant thinking, and cross-linking to maximize memory retention and idea generation.". TRIGGER WHEN: the user asks to create a mind map, mappa mentale, concept map, or visual summary - typically to learn, brainstorm, or structure knowledge around a topic. DO NOT TRIGGER WHEN: the user wants a traditional outline, flowchart, or diagram (use Mermaid directly) rather than a radiant Buzan-style mind map.

2026-07-266

skills-creator

acaprino/claude-code-daodan

Guided creation of Claude Code plugin components - skills, agents, commands, and full plugins. Walks through requirements gathering, generates production-ready files with real content (not placeholders), registers in marketplace.json, and bumps versions. Also trigger on "new skill", "new agent", "new plugin", "add a skill", "add an agent", "skills-creator", "skills-hammer". Also helps decide skill vs agent architecture when reorganizing plugins. DO NOT TRIGGER for editing or updating existing components - only for new creation or architectural decisions (skill vs agent). TRIGGER WHEN: the user asks to create, add, scaffold, or build a new skill, agent, command, or plugin DO NOT TRIGGER WHEN: the task is outside the specific scope of this component.

2026-07-266

stripe

acaprino/claude-code-daodan

Stripe payments knowledge base - API patterns, checkout optimization, subscription lifecycle, pricing strategies, webhook reliability, Firebase integration, cost analysis, and revenue modeling. Loaded by stripe-integrator and revenue-optimizer agents; also consumable directly when the user asks for Stripe-specific patterns without needing an agent. TRIGGER WHEN: working with Stripe API (Payment Intents, Customers, Subscriptions, Checkout Sessions, Connect, webhooks, tax, usage-based billing), pricing strategy, or revenue modeling. DO NOT TRIGGER WHEN: payment work is non-Stripe (PayPal, Square, crypto) or the task is generic e-commerce unrelated to payments.

2026-07-266

name	defect-taxonomy
description	Comprehensive defect taxonomy knowledge base - 16 macro-categories, 140+ subcategories of source code defects with CWE/OWASP mappings, detection strategies, fix patterns, and review frameworks. Used by senior-review agents (code-auditor, security-auditor, ui-race-auditor) to enrich analysis with structured defect knowledge.

Defect Taxonomy Knowledge Base

Unified classification of source code defects synthesizing MITRE CWE, OWASP Top 10, NASA Power of 10, IBM ODC, IEEE 1044, and Beizer's taxonomy into actionable detection references.

Reference Files

Load relevant references based on the code domain under review. Do NOT load all files -- select only what applies.

Taxonomy References (defect patterns)

Reference	When to load
`references/concurrency-state.md`	Concurrent/parallel code, shared state, async patterns, closures, variable scoping
`references/logic-types.md`	Comparisons, boolean logic, type conversions, generics, serialization
`references/memory-resources.md`	Memory management (C/C++/Rust), resource lifecycle, error handling, performance bottlenecks
`references/security.md`	Security review -- injection, auth, crypto, secrets, CORS, SSRF, input validation
`references/distributed-integration.md`	Microservices, APIs, distributed state, message queues, service mesh, migrations
`references/data-design-ops.md`	Database/ORM, design patterns, build/deploy, testing, observability
`references/detection-matrix.md`	Cross-cutting: detection channels per category, language-weighted focus, ROI prioritization

Review Frameworks (analysis methodology)

Reference	When to load
`references/review-frameworks.md`	Always load for code-auditor. Contains cognitive models, failure flow methodology, anti-pattern checklist, mental models, severity/scoring system

Language-Weighted Category Focus

C/C++: concurrency-state.md + memory-resources.md (categories 1, 5)
JVM (Java/Kotlin/Scala): concurrency-state.md + logic-types.md + memory-resources.md (categories 2, 7, 8)
JavaScript/TypeScript: concurrency-state.md + logic-types.md + security.md (categories 2, 4, 6)
Python: logic-types.md + security.md + memory-resources.md (categories 4, 6, 7)
Go/Rust: concurrency-state.md + memory-resources.md (categories 1, 5, 7)
Microservices (any): distributed-integration.md + data-design-ops.md (categories 8-12)

Usage Instructions

Identify the language(s) and domain of the code under review
Load the review-frameworks.md reference (for code-auditor agent)
Load 1-3 taxonomy references matching the language/domain
Apply detection strategies from the loaded references during analysis
Map findings to CWE identifiers where applicable
Use the detection-matrix.md to prioritize detection approach