security-review

Étoiles15

Forks4

Mis à jour17 mai 2026 à 14:11

SCAFFOLDED. Phase 4 copies the validated skill manifest from Mac. Content is byte-identical across platforms. Do not adopt until Phase 4 validates skill loading in Claude Code on Windows.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

rocklambros

rocklambros/harness-engineering

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	security-review
description	SCAFFOLDED. Phase 4 copies the validated skill manifest from Mac. Content is byte-identical across platforms. Do not adopt until Phase 4 validates skill loading in Claude Code on Windows.

Security Review Skill (Windows) — SCAFFOLDED

Phase 4 replaces this scaffold with the validated content copied from mac/harness/skills/security-review/SKILL.md. Skill is Layer 1 of the three-layer security stack and is content-identical across all three platforms.

See Mac equivalent for production content.

Plus depuis ce dépôt

même dépôt

security-review

rocklambros/harness-engineering

Pre-generation security guidance for AI-generated code. Loads anti-pattern context on demand based on file type. Use whenever writing or editing source code, especially in Python, JavaScript, TypeScript, Go, Bash, Terraform, or SQL. The skill flags high-frequency vulnerability patterns before they ship: dependency risks (slopsquatting and confusion), cross-site scripting, hardcoded secrets, SQL injection, authentication failures, input validation gaps, command injection, missing rate limiting, data exposure through verbose errors or logs, and unsafe file upload handling.

2026-05-1815

mcp-server-pre-trust-audit

rocklambros/harness-engineering

Use when about to register a new MCP server, add to mcpServers, or accept an MCP invocation from a cloned repo. Walks the pre-trust audit (license, source review, network egress, version pin, secret-handling) before the server reaches the tool pool. Closes the gap above ~/.claude/mcp.json that the SessionStart hook does not gate.

2026-05-1115

seed-evaluation

rocklambros/harness-engineering

Use when asked whether to adopt a tool, library, plugin, skill collection, agent definition, hook library, or any external project as part of the Claude Code harness. Applies the foundation/03 two-stage methodology (pre-filter then deep-eval), produces a binary integrate / integrate-with-constraints / reject decision, and prevents evaluation theater by rejecting rubric scoring.

2026-05-1115

Exécutez n'importe quel Skill en un clic