メニュー
Run security scans and write a security evidence report.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Enforce architecture boundaries using dependency-cruiser and generate a dependency graph.
Synchronise work with Beads (bd). Ensure current work is tracked, linked, and committed as evidence.
Run deterministic browser QA using agent-browser. Produce QA report + trace/screenshot evidence.
Run the full local quality gate suite and write a merge-evidence report to reports/quality/.
Run a formal inspection-style review (Fagan) using a checklist, producing a merge-blocking review record.
| name | security-scan |
| description | Run security scans and write a security evidence report. |
| disable-model-invocation | true |
| argument-hint | [mode=pr|nightly] |
| allowed-tools | Read, Grep, Glob, Bash(npm audit *), Bash(npm sbom *) |
reports/security/SECURITY_REPORT.mdreports/security/sbom.jsonnpm audit --audit-level=high — report vulnerabilities.npm sbom --sbom-format cyclonedx > reports/security/sbom.jsonsemgrep --config p/ci src/ — fail on findings.reports/security/SECURITY_REPORT.md summarising: