Run any Skill in Manus with one click

security-review

Stars15

Forks4

UpdatedMay 17, 2026 at 14:11

SCAFFOLDED. Phase 4 copies the validated skill manifest from Mac. Content is byte-identical across platforms. Do not adopt until Phase 4 validates skill loading in Claude Code on Windows.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

rocklambros

rocklambros/harness-engineering

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	security-review
description	SCAFFOLDED. Phase 4 copies the validated skill manifest from Mac. Content is byte-identical across platforms. Do not adopt until Phase 4 validates skill loading in Claude Code on Windows.

Security Review Skill (Windows) — SCAFFOLDED

Phase 4 replaces this scaffold with the validated content copied from mac/harness/skills/security-review/SKILL.md. Skill is Layer 1 of the three-layer security stack and is content-identical across all three platforms.

See Mac equivalent for production content.

More from this repository

same repository

security-review

rocklambros/harness-engineering

Pre-generation security guidance for AI-generated code. Loads anti-pattern context on demand based on file type. Use whenever writing or editing source code, especially in Python, JavaScript, TypeScript, Go, Bash, Terraform, or SQL. The skill flags high-frequency vulnerability patterns before they ship: dependency risks (slopsquatting and confusion), cross-site scripting, hardcoded secrets, SQL injection, authentication failures, input validation gaps, command injection, missing rate limiting, data exposure through verbose errors or logs, and unsafe file upload handling.

2026-05-1815

mcp-server-pre-trust-audit

rocklambros/harness-engineering

Use when about to register a new MCP server, add to mcpServers, or accept an MCP invocation from a cloned repo. Walks the pre-trust audit (license, source review, network egress, version pin, secret-handling) before the server reaches the tool pool. Closes the gap above ~/.claude/mcp.json that the SessionStart hook does not gate.

2026-05-1115

seed-evaluation

rocklambros/harness-engineering

Use when asked whether to adopt a tool, library, plugin, skill collection, agent definition, hook library, or any external project as part of the Claude Code harness. Applies the foundation/03 two-stage methodology (pre-filter then deep-eval), produces a binary integrate / integrate-with-constraints / reject decision, and prevents evaluation theater by rejecting rubric scoring.

2026-05-1115

Run any Skill with one click