メニュー
Review a diff for security, auth, permission, payment, data, secrets, prompt injection, and audit risks.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Update durable repo memory after planning, merge, rejection, blocker, or repeated agent mistake.
Convert an approved plan into PR-sized chunk contracts with scope, acceptance criteria, reviewer requirements, and human review focus.
Review a diff for architecture drift, wrong abstractions, boundary violations, coupling, and chunk-scope violations.
Review CI, lint, typecheck, test, coverage, workflow, and package-script changes for weakening or bypass behavior.
Fast-fail or split unreviewable agent work based on scope, size, file types, boundary count, missing evidence, or unclear intent.
Perform read-only repository discovery for an initiative. Use to map existing behavior, files, tests, risks, and unknowns before planning.
| name | security-review |
| description | Review a diff for security, auth, permission, payment, data, secrets, prompt injection, and audit risks. |
Review current changes against security boundaries.
For each finding:
Severity:
Location:
Problem:
Why it matters:
Suggested fix:
Blocks PR: yes/no
End with PASS / PASS WITH LOW RISKS / FAIL.