Menü
Run the security-audit DSL against a closed scope and emit findings.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
| name | security-review |
| description | Run the security-audit DSL against a closed scope and emit findings. |
| argument-hint | --spec=<path> [--cwd=<dir>] |
| user-invocable | true |
| disable-model-invocation | false |
spec_path degrades to status=needs_user.cwd (defaults to the process working tree).ok when every check passes and failed when any check fails (failing check names surface as repair commands).When the active profile is security, this skill is a required gate for phase close.
spec_path points at a readable declarative audit spec.A missing or unreadable spec_path degrades to status=needs_user, which routes the operator to an AskUserQuestion prompt for the audit spec rather than running an empty check set.
Skill envelope with header.skill = "/security-review". Body carries scope_id, spec_path, checks_run, and the per-check findings.
Model-only playbook for adding a property-based test that pins a function's invariant.
Dispatch a claimed wave to a runtime per the V8 session-reuse ladder.
Fresh-context verification of a phase deliverable or wave outcome. Spawns a fresh auditor subagent that re-reads the diff against the success criteria.
Auto-chained research follow-up skill with recursion guard for residual unknowns.
Resolve the Co-Authored-By trailer policy for the active repo.
Compress the session conversation when context approaches the limit.