メニュー
Stop CodeQL residual thrashing on Percussion CMS PRs. Use when working code-scanning alerts, security advisories, SSRF/LDAP/path/XXE fixes, // codeql suppressions, query-filters, model packs, or PR checks named CodeQL / Analyze (java-kotlin).
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Strict pre-commit / pre-PR code review for Percussion CMS (Erlang persona). Use when the user says "Erlang", "review my changes", "pre-commit review", "pre-PR review", "strict review", or before git commit / gh pr create. Independent review only; blocks on bugs, missing behavioral tests, and non-portable (Windows/Unix) file path handling. Loads review memory and writes durable reports under docs/ai-generated/code-reviews/.
A skill for writing clean, maintainable, and effective Java unit tests using JUnit 5 and Mockito. Use when the user asks for "unit tests", "test cases", "tests", "JUnit", "Mockito", or related terms. Also use for migrating JUnit 3/4 tests to JUnit 5.
Best practices and version-correct Javadoc comment generation for percussioncms. Use when the user asks for "Javadoc", "Java documentation", "doc comments", "doc", "documentation", or related terms.
Use when the user needs to create, apply, verify, or revert patches for source files using the Linux diff and patch utilities, or when generating sed-based inline edits as a lightweight alternative.
Centralized skill to verify the integrity and authenticity of AI resources (skills, prompts, instructions). Uses SHA-256 hashing and Sigstore sidecar signatures.
Manually invalidates a signature by renaming sidecar files.
| name | codeql-pr |
| description | Stop CodeQL residual thrashing on Percussion CMS PRs. Use when working code-scanning alerts, security advisories, SSRF/LDAP/path/XXE fixes, // codeql suppressions, query-filters, model packs, or PR checks named CodeQL / Analyze (java-kotlin). |
docs/ai-generated/tasks/gh-codeql-alerts/codeql-pr-playbook.md
.github/workflows/codeql.yml + codeql-config.yml + .github/codeql/models). Scope: Java + JavaScript/TypeScript only.not-configured. GitHub Code Quality (dynamic Code Quality: CodeQL Setup) must stay disabled (Settings → Code quality) — it ignores advanced config and can mass-close alerts.// codeql[rule-id] → path query-filters → dismiss last.// codeql[...] on the alert line or the single line immediately above a one-line sink. Multi-line builders with a comment three lines up fail.resolveReviewThread (root AGENTS.md).gh api repos/intersoftdatalabs-in/percussioncms/code-scanning/default-setup --jq .state
# expected: not-configured
If configured:
gh api --method PATCH repos/intersoftdatalabs-in/percussioncms/code-scanning/default-setup \
-f state=not-configured
| Kind | Model kind string | Example type |
|---|---|---|
| SSRF | request-forgery | URLValidation |
| LDAP | ldap-injection | PSJndiUtils.escapeLdapFilter |
| Path | path-injection | PSPathInjectionGuard |
| XXE | xxe | PSSecureXMLUtils.getSecuredSaxSource |
Edit .github/codeql/models/models/*.model.yml, bump pack version in codeql-pack.yml, document in suppressions.md if replacing a path exclude.
./mvn-env.sh tests greennot-configuredSee docs/ai-generated/tasks/gh-codeql-alerts/codeql-pr-playbook.md for architecture, metrics, and dismiss API details.