Menú
Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Load prompts from external files with path expansion.
SSE, WebSockets, LLM token streaming patterns.
Visual review pipeline for UI components.
Atomic commits, conventional commits, trunk-based development
Implement in thin vertical slices — one commit per task, testable, rollback-safe
Define requirements via spec-first before any code — PRD, edge cases, acceptance criteria
| name | security-hardening |
| description | Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit |
Código inseguro em produção = pesadelo. Isso é não-negociável.
| Domain | Coverage |
|---|---|
| SAST | SQL injection, XSS, CSRF, path traversal, command injection |
| MCP | Credential leakage prevention, tool access control, input sanitization |
| Secrets | No hardcoded keys, tokens, passwords in code/logs |
| Deps | Known CVEs, outdated packages, deprecated libs |
| Container | Non-root user, health checks, minimal base images |
mcp_tools YAML fieldpip-audit --requirement requirements.txt
npm audit