メニュー
OWASP Top 10, SAST/DAST, dependency security, and secrets management.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
19-agent team structure, decision trees for agent selection, Haiku vs Sonnet model selection, and agent collaboration principles. Use when deciding which sub-agent to invoke, understanding team responsibilities, or learning multi-agent orchestration.
Guide Alfred sub-agents to actively invoke AskUserQuestion for ambiguous decisions.
Master-Clone pattern implementation guide for complex multi-step tasks with full project context
Systematic code review guidance and automation. Apply TRUST 5 principles, check code quality, validate SOLID principles, identify security issues, and ensure maintainability. Use when conducting code reviews, setting review standards, or implementing review automation.
.moai/config.json official schema documentation, structure validation, project metadata, language settings, and configuration migration guide. Use when setting up project configuration or understanding config.json structure.
Claude Code context window optimization strategies, JIT retrieval, progressive loading, memory file patterns, and cleanup practices. Use when optimizing context usage, managing large projects, or implementing efficient workflows.
| name | moai-domain-security |
| version | 2.0.0 |
| created | "2025-10-22T00:00:00.000Z" |
| updated | "2025-10-22T00:00:00.000Z" |
| status | active |
| description | OWASP Top 10, SAST/DAST, dependency security, and secrets management. |
| keywords | ["security","owasp","sast","secrets","vulnerabilities"] |
| allowed-tools | ["Read","Bash"] |
| Field | Value |
|---|---|
| Skill Name | moai-domain-security |
| Version | 2.0.0 (2025-10-22) |
| Allowed tools | Read (read_file), Bash (terminal) |
| Auto-load | On demand when keywords detected |
| Tier | Domain |
OWASP Top 10, SAST/DAST, dependency security, and secrets management.
Key capabilities:
Automatic triggers:
/alfred:2-run)Manual invocation:
| Tool | Version | Purpose | Status |
|---|---|---|---|
| OWASP ZAP | 2.16.0 | Primary | ✅ Current |
| Trivy | 0.58.0 | Primary | ✅ Current |
| Bandit | 1.8.0 | Primary | ✅ Current |
moai-foundation-langs for language detectionmoai-foundation-trust for quality gatesDocumentation links updated 2025-10-22
moai-foundation-trust (quality gates)moai-alfred-code-reviewer (code review)moai-essentials-debug (debugging support)✅ DO:
❌ DON'T: