メニュー
Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/jmagly/aiwg --skill strict-toolchain-auditコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
WCAG accessibility analysis for color palettes including contrast ratios, compliance checking, and remediation suggestions. Use when user needs to verify colors meet accessibility standards.
Generate, analyze, compare, export, and suggest color palettes using color theory. Use when user asks about colors, palettes, color schemes, or needs help choosing colors for a project.
Research current color trends from Pantone, architecture, film, and design. Use when user asks about trending colors, popular palettes, or wants research-backed color inspiration.
SOC 職業分類に基づく
SKILL.md を表示中
| namespace | aiwg |
| name | strict-toolchain-audit |
| platforms | ["all"] |
| description | Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors |
| requires | [{"project-files":"build files or CI workflows for at least one supported language"}] |
| ensures | [{"report":"strictness gaps per language and remediation commands"},{"exit-code":"non-zero when --fail-on-missing is set and required strictness is absent"}] |
| errors | [{"no-supported-language":"no supported language/build signal detected"}] |
| invariants | ["gradual-adoption baselines are allowed only when new warnings still fail","sanitizer jobs do not count as replacement for strict compiler/linter gates"] |
| commandHint | {"argumentHint":"[--language c|cpp|rust|go|python|typescript|auto] [--fail-on-missing] [--format text|json]","allowedTools":"Read, Bash, Grep","model":"haiku","category":"security","orchestration":false,"modelRole":"efficiency","modelTier":"economy"} |
Inspect build and CI configuration for the strict-toolchain rule. This maps curl Practice 13 into a reusable AIWG security-engineering audit.
-Wall, -Wextra, -Werror, -pedantic; recommended hardening flags are reported when absent.cargo clippy -- -D warnings or equivalent CI gate.go vet ./... and staticcheck ./... fail CI.ruff check and mypy strictness are configured.strict: true and noUncheckedIndexedAccess: true.Legacy projects may keep a baseline, but the audit must confirm that new warnings fail the build. A baseline without a ratchet is reported as a finding.
agentic/code/frameworks/security-engineering/rules/strict-toolchain.mdagentic/code/frameworks/security-engineering/skills/sanitizer-in-ci/SKILL.md