メニュー
Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Load prompts from external files with path expansion.
SSE, WebSockets, LLM token streaming patterns.
Visual review pipeline for UI components.
Atomic commits, conventional commits, trunk-based development
Implement in thin vertical slices — one commit per task, testable, rollback-safe
Define requirements via spec-first before any code — PRD, edge cases, acceptance criteria
| name | security-hardening |
| description | Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit |
Código inseguro em produção = pesadelo. Isso é não-negociável.
| Domain | Coverage |
|---|---|
| SAST | SQL injection, XSS, CSRF, path traversal, command injection |
| MCP | Credential leakage prevention, tool access control, input sanitization |
| Secrets | No hardcoded keys, tokens, passwords in code/logs |
| Deps | Known CVEs, outdated packages, deprecated libs |
| Container | Non-root user, health checks, minimal base images |
mcp_tools YAML fieldpip-audit --requirement requirements.txt
npm audit