Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

security-review

Étoiles132

Forks11

Mis à jour8 juillet 2026 à 00:26

Review permissions, local IPC, filesystem, and command execution risks.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

GongShichen

GongShichen/LuminaCode

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	Security Review
description	Review permissions, local IPC, filesystem, and command execution risks.
when-to-use	Use when changes touch daemon, tools, permissions, or local files.
user-invocable	false
context	inline

Check the product's actual threat surface:

Authentication, authorization, session/tenant isolation, token handling, and privilege boundaries.
Permission routing, denial behavior, auditability, destructive operations, and user confirmation.
File path, upload/download, command execution, dependency, plugin, extension, and external-service trust boundaries.
Secrets, credentials, environment variables, logs, telemetry, error messages, and data retention.
Injection risks: SQL/NoSQL, shell, template, path traversal, XSS, SSRF, prompt/tool injection, or unsafe deserialization as relevant.
Privacy leakage between users, sessions, projects, environments, or visible/hidden product surfaces.
Safe defaults, least privilege, and recovery behavior after partial failure.

Plus depuis ce dépôt

même dépôt

evidence-matrix

GongShichen/LuminaCode

Convert source notes into claim-level evidence with confidence and limitations.

2026-07-08132

citation-qa-report

GongShichen/LuminaCode

Verify source traceability, artifact completeness, and citation correctness before citation_qa gate.

2026-07-08132

research-report

GongShichen/LuminaCode

Write an evidence-backed final research report from sources and the evidence matrix.

2026-07-08132

methodology-review

GongShichen/LuminaCode

Review research method quality, source diversity, bias, and conclusion strength.

2026-07-08132

scope-brief

GongShichen/LuminaCode

Convert a broad research request into subquestions, assumptions, and source criteria.

2026-07-08132

search-plan

GongShichen/LuminaCode

Design and execute a multi-round SearxNG/arXiv search strategy.

2026-07-08132

name	Security Review
description	Review permissions, local IPC, filesystem, and command execution risks.
when-to-use	Use when changes touch daemon, tools, permissions, or local files.
user-invocable	false
context	inline

Check the product's actual threat surface:

Authentication, authorization, session/tenant isolation, token handling, and privilege boundaries.
Permission routing, denial behavior, auditability, destructive operations, and user confirmation.
File path, upload/download, command execution, dependency, plugin, extension, and external-service trust boundaries.
Secrets, credentials, environment variables, logs, telemetry, error messages, and data retention.
Injection risks: SQL/NoSQL, shell, template, path traversal, XSS, SSRF, prompt/tool injection, or unsafe deserialization as relevant.
Privacy leakage between users, sessions, projects, environments, or visible/hidden product surfaces.
Safe defaults, least privilege, and recovery behavior after partial failure.