メニュー
Use before releases or after dependency updates to run security checks — cargo-audit, ASVS compliance matrix review, clippy security lints, redaction pattern verification.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Use when adding a new MCP tool to the RAPS MCP server — covers tool schema definition, handler implementation, dispatch registration, and the client accessor pattern.
Use when adding a new CLI command or subcommand to RAPS — covers the clap struct pattern, module wiring, output formatting, and test structure across the 10-crate workspace.
Use when new RAPS features ship and LinkedIn content is needed — adds posts to the raps-smm post bank following established tone, format, and hashtag conventions.
Use when bumping the RAPS version for a new release — updates Cargo.toml workspace version, 9 internal crate dependencies, 6 npm package.json files, creates git tag, and triggers the release workflow.
Use when adding or updating CI/CD integrations in the raps-actions repo — GitHub Actions composite actions, GitLab CI include templates, test workflows, and floating tag management.
Use when you need to create a shortened URL at go.rapscli.xyz — for long Cloudflare OAuth links, wrangler login URLs, or any URL that's unwieldy in the terminal.
| name | raps-security-audit |
| version | 1.0 |
| description | Use before releases or after dependency updates to run security checks — cargo-audit, ASVS compliance matrix review, clippy security lints, redaction pattern verification. |
Run security checks and update compliance documentation.
Repo: /root/github/raps/raps
Docs: docs/security/
cargo audit # Known vulnerabilities
cargo deny check # License + advisory check
cargo clippy --workspace --all-features -- -D warnings
Key clippy lints to watch for:
clippy::unwrap_used — potential panicsclippy::expect_used — same# Verify log redaction patterns work
cargo test -p raps-kernel logging
cargo test -p raps-kernel security
Redaction covers: Bearer tokens, Basic auth, Cookie headers, X-API-Key, URL ?access_token= / ?apikey= params.
cargo test -p raps-kernel security
Tests: ../../etc/passwd -> passwd, empty string -> Err, .. alone -> Err, NUL bytes stripped, unicode preserved, validate_path_within rejects escape.
File: docs/security/asvs-l2-compliance-matrix.md
Format:
| ID | Requirement | Status | Evidence | Notes |
|----|-------------|--------|----------|-------|
| V2.1 | OAuth uses PKCE | Met | `auth/device_code.rs:37` | RFC 7636 compliant |
Statuses: Met, Partial, Gap, N/A
Update when:
| File | Scope |
|---|---|
asvs-l2-compliance-matrix.md | ASVS 4.0.3 L2 controls |
asvs-v2-auth-audit.md | Authentication (PKCE, CSRF, token storage) |
asvs-v5-v12-input-files-audit.md | Input validation, file handling |
asvs-v6-v9-crypto-comms-audit.md | Cryptography, communications |
asvs-v7-logging-audit.md | Error handling, logging |
plugin-trust-model.md | Plugin security |
gdpr-privacy-statement.md | GDPR compliance |
nist-ssdf-mapping.md | NIST SSDF mapping |
soc2-tsc-self-assessment.md | SOC 2 Type II |
cargo audit and cargo deny checkcargo clippy --workspace --all-features -- -D warningscargo test -p raps-kernel security logging)docs/security/