Menu
Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Load prompts from external files with path expansion.
SSE, WebSockets, LLM token streaming patterns.
Visual review pipeline for UI components.
Atomic commits, conventional commits, trunk-based development
Implement in thin vertical slices — one commit per task, testable, rollback-safe
Define requirements via spec-first before any code — PRD, edge cases, acceptance criteria
| name | security-hardening |
| description | Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit |
Código inseguro em produção = pesadelo. Isso é não-negociável.
| Domain | Coverage |
|---|---|
| SAST | SQL injection, XSS, CSRF, path traversal, command injection |
| MCP | Credential leakage prevention, tool access control, input sanitization |
| Secrets | No hardcoded keys, tokens, passwords in code/logs |
| Deps | Known CVEs, outdated packages, deprecated libs |
| Container | Non-root user, health checks, minimal base images |
mcp_tools YAML fieldpip-audit --requirement requirements.txt
npm audit