ソース情報
- リポジトリ
- jgador/sqloom
- ソースの最終更新活動
- 2026年7月20日 08:42
- 検出された SKILL.md の言語
- 英語
- スター
- 1
- フォーク
- 0
インストール方法
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
ソースファイルを確認
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
メニュー
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SOC 職業分類に基づく
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/jgador/sqloom --skill sqloomコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか?SkillsMP が現在取得できるファイルをダウンロードできます。
SKILL.md を表示中
Compare the current Windows Codex CLI bundled ripgrep version with the local system rg version and print a matching Winget install or update script when they differ. Use when the user asks whether their installed rg should be updated to match Codex, which rg/ripgrep version Codex CLI bundles on Windows, or why Codex and local PowerShell report different rg versions.
Run a fast read-only security leak check over staged changes, uncommitted diffs, named paths, or a branch diff against a base ref such as origin/master. Use for PR checks, pre-commit checks, and requests to scan newly introduced secrets or credentials; use security-audit instead for full repository, full history, all-blob, dependency, or code-level security audits.
Run a read-only full security audit of the current repository, combining a code-level vulnerability review with secret scanning across the working tree, the full git history, and every blob in the git object database. Use for authoritative full audits, committed-secret checks, dependency risk checks, and code-level vulnerability review; use security-audit-fast instead for staged, named-path, or branch-diff leak checks.
| name | sqloom |
| description | Guide tune-first Sqloom harness setup and command usage for ASP.NET Core apps. |
Use this skill when helping a user create or update a Sqloom harness, scaffold the Sqloom skill with sqloom init, or run Sqloom against an ASP.NET Core app. Default to sqloom tune when the user wants tuning or the complete Sqloom workflow. If a usable harness already exists, skip harness generation intake and route to the requested command. Do not generate harness files until the required intake is complete.
sqloom tuneTreat sqloom tune as the primary path for tuning. It is the simplest complete workflow because it runs replay -> observe -> correlate -> advise in one command and writes the stage artifacts together.
Use the individual commands as focused tools:
sqloom replay for replay-only checks.sqloom observe when the user only needs Query Store evidence.sqloom correlate when replay and Query Store artifacts already exist.sqloom advise when correlation evidence already exists and the user only needs advice or SQL proposals.sqloom init only to scaffold the Sqloom agent skill into a repository.Use references/commands.md for exact Sqloom commands, arguments, required options, defaults, allowed values, and option names. Do not infer CLI syntax from examples or prose when the command reference covers it.
sqloom tune for tuning unless the user asks for a specific stage or artifact-level command.$env:OPENAI_API_KEY examples as shell expansion into the --openai-api-key option, not as automatic Sqloom environment-variable loading.Sqloom.Testing From Consumer HarnessesDefault new harnesses to a .NET 10 C# file-based app that lives in the app repository as durable test-support source. Follow an established repository convention when one exists; otherwise generate tests/Sqloom/<app>/<profile>/Harness.cs in a dedicated non-project directory. Keep it outside artifacts/ and outside an existing SDK project directory unless that project explicitly excludes the file from its compile globs. Pin the public Sqloom.Testing package to the installed Sqloom tool version and reference the target app project with file-app directives:
#:sdk Microsoft.NET.Sdk.Web
#:property TargetFramework=net10.0
#:property ManagePackageVersionsCentrally=false
#:package Sqloom.Testing@<sqloom-version>
#:project <relative-app-project.csproj>
Determine <sqloom-version> from sqloom --version. Keep the path after #:project relative to Harness.cs when practical. The file needs a harmless valid entry point and exactly one public non-abstract ISqloomApplication implementation. Generate it once, commit it, and maintain its app startup, authentication, tenant, database, and replay setup like an integration-test fixture.
Existing project-backed harnesses remain supported. When updating one, keep its normal NuGet PackageReference to Sqloom.Testing; do not convert a working harness unless the user requests file-based generation.
Use using Sqloom.Testing; for ISqloomApplication, manifest, and session contracts. Use using Sqloom.Testing.AspNetCore; only when the harness needs the ASP.NET Core replay SQL capture helpers. Do not ask the user to reference Sqloom.Pipeline directly for normal harness work; Sqloom.Testing contains the shared Sqloom.Pipeline.* pipeline surface.
Inspect the target app project, controller source, and existing tests before asking questions. Look for:
ISqloomApplication harnessPrefer concrete evidence from the target repository over assumptions.
Ask at most three questions at a time. By default, Sqloom replay and tune use Microsoft Agent Framework through --replay-data-agent required to fill missing replay path, query, header, and body values. Do not ask the user to provide those HTTP request values unless one of these is true:
--replay-data-agent offCollect only the missing non-agent inputs needed for the intended command:
--app-project is neededWhen the target repository already answers one of these, state the observed value and do not ask for it again.
Before writing harness files, confirm the complete intake:
--replay-data-agent offGenerate the smallest C# file-based harness in durable test-support source, defaulting to tests/Sqloom/<app>/<profile>/Harness.cs. Use one committed harness per app/startup profile, not one per endpoint. The file references the public Sqloom.Testing package and target app project, starts the app, and exposes exactly one ISqloomApplication. Sqloom discovers controller methods and parameters from the target app project referenced by the harness or supplied with --app-project. Keep endpoint selection in the Sqloom command through --target "METHOD /path/template". Preserve the harness between runs and update it in place only when startup, hosting, auth, tenant, database bootstrap, source project selection, or app-owned replay policy changes.
Sqloom always builds .cs harness targets and requires .NET SDK 10 or later through the selected --dotnet-command. Do not pass --no-build for a file-based harness. Keep app-specific setup in the harness; do not add Sqloom runtime features for one app's setup. Keep ReplayProfile minimal: do not add personas or overlays solely to supply path, query, header, or body values when the default replay data agent can prepare them. Use overlays for app-owned deterministic values, non-GET opt-in, and skip rules.