ワンクリックで
github
GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
メニュー
GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Framework architect: audit Granit .NET modules against framework conventions, architecture rules, and CLAUDE.md standards. Checks module anatomy, DDD, naming, OpenAPI, persistence, validation, events, metrics, localization, documentation, and cross-cutting concerns. Invoke to verify convention compliance before merge or during tech-debt sprints.
Granit integration auditor: verify that a CONSUMING application (granit-showcase-dotnet, granit-microservice-template, or any host built on the Granit NuGet packages) wires the framework correctly. Builds a package→wiring matrix — every referenced Granit.* package must have its matching service registration, endpoints map, EF Core companion + migration, and provider hookup — then checks the host bootstrap, middleware order, persistence, auth, config, and localization. Invoke before shipping a host, after a framework bump, or when an endpoint/table silently goes missing.
Performance architect: audit Granit .NET modules for scalability bottlenecks and propose high-impact optimizations. Static analysis (EF Core query patterns, allocations/GC, async, caching, HTTP/serialization, messaging, startup/runtime, horizontal scaling) plus live profiling (dotnet-trace/counters/dump) and BenchmarkDotNet guidance. Multi-provider aware: PostgreSQL (primary), SQL Server, SQLite. Invoke before a load test, during a scaling sprint, or when an endpoint/job is slow.
Principal Application Security Architect: exhaustive security audit of the Granit framework. Covers IAM (BFF, DPoP, OIDC), AI/MCP security, data protection, multi-tenancy isolation, infrastructure resilience, and supply chain. Produces STRIDE threat models, CVSS-scored findings, FAPI/ISO 27001/GDPR gap analysis, and a prioritized remediation roadmap.
QA/DevSecOps engineer: full project quality audit or targeted MR review. Analyzes format, tests, local coverage (ReportGenerator), then SonarQube (quality gate, issues, hotspots, coverage). Detects regressions on modified files. Also generates UAT checklists from endpoint definitions. Invoke before a merge or to reduce technical debt.
DocuMaster: generate world-class technical documentation for Granit framework modules. Adapts to audience (developer, architect, integrator). Produces clear, engaging Markdown with diagrams, code samples, and callouts. Use when documenting a module, writing a guide, or creating an ADR.
| name | github |
| description | GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation. |
| argument-hint | [operation] [args] |
Before any command, detect the current repository:
REPO=$(gh repo view --json nameWithOwner -q .nameWithOwner)
Use $REPO in gh -R "$REPO" commands.
| Type | Label | Title prefix | Parent | Parent section |
|---|---|---|---|---|
| Epic | Type: Epic | [EPIC] | - | - |
| Feature | Type: Feature | [FEATURE] | Epic | ## Features |
| Story | Type: Story | [STORY] | Feature | ## User Stories |
| Bug | Type: Bug | [BUG] | - | - |
| Spike | Type: Spike | [SPIKE] | - | - |
| Tech Debt | Type: Tech Debt | [TECH DEBT] | - | - |
Title rules: no emoji, prefix in brackets, concise.
Language: All GitHub issues (titles, descriptions, comments) must be written in English — the granit-dotnet and granit-front repos are open-source.
GitHub supports native sub-issues. Use the Sub-issues API to create parent-child relationships:
# Attach a child issue to a parent
CHILD_ID=$(gh api repos/$REPO/issues/{child_number} --jq .id)
gh api repos/$REPO/issues/{parent_number}/sub_issues -X POST -F sub_issue_id="$CHILD_ID"
# List sub-issues of a parent
gh api repos/$REPO/issues/{parent_number}/sub_issues
Epic
└── Feature (sub-issue of Epic)
└── Story (sub-issue of Feature)
Always use the sub-issues API to establish hierarchy. Additionally, keep #N
references in the parent description for readability (section ## Features or
## User Stories).
Before creating, modifying, or closing an issue, always read the existing context:
When investigating a bug or refactoring request, search for related issues:
gh issue list -R "$REPO" --search "keyword"
gh issue view {number} -R "$REPO" --json body -q .body
- #N - short descriptionAlways use a HEREDOC for multi-line descriptions:
--body "$(cat <<'EOF'
content here
EOF
)"
Templates are in .github/ISSUE_TEMPLATE/.
See templates.md for structure per issue type.
Two persona registries:
governance-compliance/docs/03-organization/ORG-05-PERSONAS.mdNEVER invent a new persona.
Infra/governance personas: SRE, Ingénieur DevOps, Développeur, Architecte, DBA, RSSI, DPO, CTO, Direction, Directeur juridique, Auditeur interne, Auditeur externe, Utilisateur, Product Owner
Application personas: Visiteur, Utilisateur authentifié, Administrateur d'application, Approbateur, Gestionnaire de contenu
NEVER use hybrid roles ("slash roles" like SRE / DevOps).
Context (on-call, audit) goes in the story body, not in the persona.
governance-compliance/docs/03-organization/ORG-05-PERSONAS.md (infra/governance) · personas-applicatifs.md (application)