review

Étoiles9

Forks0

Mis à jour13 juin 2026 à 15:23

Security-focused code review with severity ratings. Use when reviewing code for security issues, vulnerabilities, or OWASP concerns.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

kovrichard

kovrichard/portable-agent-layer

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	review
description	Security-focused code review with severity ratings. Use when reviewing code for security issues, vulnerabilities, or OWASP concerns.
argument-hint	["file or directory"]

When the user invokes /review <file, diff, or PR>:

Read the target code or diff in full
Analyze for:
- Security — OWASP top 10, injection, auth, data exposure
- Logic — edge cases, off-by-one, null handling, race conditions
- Performance — N+1 queries, unnecessary allocations, blocking calls
- Style — consistency with surrounding code (not your preferences)
Output findings grouped by severity:
- CRITICAL — must fix before merge
- WARNING — should fix, creates risk
- SUGGESTION — nice to have
Each finding includes: file:line, what's wrong, concrete fix
End with a one-line verdict: APPROVE / REQUEST CHANGES / NEEDS DISCUSSION

Plus depuis ce dépôt

même dépôt

humanize

kovrichard/portable-agent-layer

Rewrites text to remove AI slop and make it sound human: eliminates em-dashes and en-dashes, LLM tell-words (delve, leverage, robust, seamless), 'not just X, it's Y' constructions, rule-of-three padding, boilerplate openers/closers, hedging, and decorative emoji, while preserving meaning and voice. Use when asked to humanize text, de-slop, remove AI dashes or em-dashes, strip AI tells, make writing sound human, or clean AI-generated prose.

2026-07-099

author-pal-skill

kovrichard/portable-agent-layer

Author a NEW skill that ships WITH the PAL repo (committed to assets/skills/ and installed for every downstream user). Use only when working inside the portable-agent-layer repo and adding a shared, general-purpose skill. For a user's own private skill, use create-skill instead.

2026-07-059

create-subagent

kovrichard/portable-agent-layer

Create a user-scoped subagent for every installed agent (Claude Code, opencode, Cursor, Copilot) from one merged definition, then install and run the doctor on it. Use when the user asks to create a subagent, add a custom agent, delegate a role to a specialized agent, or "make a subagent that…".

2026-07-059

create-skill

kovrichard/portable-agent-layer

Create a new personal skill for this user, scaffolded into their own ~/.pal/skills/ and linked into every installed agent. Use when the user asks to create a skill, add a capability, build a custom command, or "make a skill that…".

2026-07-049

create-pdf

kovrichard/portable-agent-layer

Convert markdown files into a styled PDF. Use when creating a PDF from existing markdown files, combining markdown into a report, or converting .md to .pdf.

2026-06-309

projects

kovrichard/portable-agent-layer

Project context management. PROACTIVE — use when the user references a project (by name or as "this repo", "current work"), asks to add/update/complete a project, says "store under a named project", "track this", "what am I working on", "my projects", "my priorities". Also triggered by ISC/ISA terminology — ISC stands for Ideal State Criteria, a project's verifiable done-conditions stored as `ISC-N:` lines in the Criteria section of its ISA.md spec. Phrases like "ISC", "open/opening the ISC", "open ISCs" (unfinished criteria), "create/creating a ticket for a project", "new ticket", or "project ticket" all map here: use `list-isc` to read them, `add-isc` to create one, `complete-isc`/`reopen-isc` to change status.

2026-06-179

Exécutez n'importe quel Skill en un clic