メニュー
Load when reviewing Mandate402 for security risks across API, auth, database, payment, x402, worker, Morph, contract, or release boundaries.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Load when backend API work touches authentication, authorization, rate limiting, CORS, input validation, public endpoints, or security remediation in Mandate402.
Load when architecture choices, ADRs, trade-off evaluation, technical debt, or pattern selection need explicit decision records for Mandate402.
Load when designing or reviewing backend systems, APIs, auth, databases, security, performance, scalability, CI/CD, monitoring, or production runtime patterns.
Load when reviewing Mandate402 code for secrets, auth, authorization, input validation, payment safety, blockchain integration, or release security risks.
Load when testing Cloudflare Workers, Vitest worker pools, binding mocks, integration tests, coverage, or worker test failures.
Load when planning or building React/Next.js UI with CO-STAR structure, design tokens, dashboards, hero sections, or custom UI prompts.
| name | security-review |
| description | Load when reviewing Mandate402 for security risks across API, auth, database, payment, x402, worker, Morph, contract, or release boundaries. |
| metadata | {"compatibility":"OpenAI/Codex, Claude, Cursor, Gemini, and agents that can read repo-local Markdown skills","source":"repo-local bridge","upstream_note":"The requested sickn33 security-review slug is not exposed by the current upstream skill index; use cc-skill-security-review plus Mandate402 security skills."} |
This is the repo-local security review router for Mandate402. It keeps the public trigger stable while routing agents to the narrower project and OSS skills that match the actual risk boundary.
mandate402-runtime-security for API/auth/payment runtime work and mandate402-blockchain for Morph or contract-facing work.api-security-hardening for public API hardening, cc-skill-security-review for general secure-code checklist coverage, and software-crypto-web3 for onchain/offchain risk.execution_unknown remains unresolved until correlation proves final truth.