メニュー
Security vulnerability scan using the Security Vulnerability Scanner agent workflow. Use when the user says security scan, check for vulnerabilities, security audit, is this secure, OWASP check, or before deploying to production.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Run a cross-model code review using both opus and sonnet in parallel, then merge and deduplicate findings into a combined summary. Use when the user says cross review, dual review, cross-model review, review with both models, or wants a thorough second-opinion review of changes.
Quick codebase exploration to understand how something works. Use when the user says how does X work, explain the flow, where is X handled, show me how, walk me through, or needs to understand code before making changes.
Fix all issues from a cross-validation review summary. Use when the user says fix issues, fix these, fix the review findings, address the issues, or after /implement produces a cross-validation summary.
Implement a validated feature plan task-by-task using Backend Architect and Frontend Developer agents, with progress tracking and user confirmation between tasks. After all tasks complete, automatically runs cross-model review (opus + sonnet). Use when the user says implement, build this, implement the plan, start implementation, or after /plan-feature produces a validated plan.
Deep investigation and root cause analysis using the DeepDive agent workflow. Use when the user says investigate, why does this break, what is causing, debug this, find the root cause, or any request to analyze a bug or issue without immediately writing a fix.
Run the three-phase Feature Planner validation before implementing a feature. Use when the user says plan feature, plan a new feature, I want to add, or any request for structured feature planning with edge case and risk analysis.
| name | security-scan |
| description | Security vulnerability scan using the Security Vulnerability Scanner agent workflow. Use when the user says security scan, check for vulnerabilities, security audit, is this secure, OWASP check, or before deploying to production. |
git branch --show-currentgit diff --name-only HEAD~5Run a security vulnerability scan on the following:
Target: $ARGUMENTS
If no target is specified, scan recently modified files and critical paths (auth, API endpoints, data handling).
Systematically analyze for:
## Security Scan Results
**Scan scope:** [what was scanned]
**Date:** [current date]
### Critical
- [Vulnerability] — `file:line` — [brief description]
### High
- [Vulnerability] — `file:line` — [brief description]
### Medium
- [Vulnerability] — `file:line` — [brief description]
### Low
- [Vulnerability] — `file:line` — [brief description]
---
**Summary:** X critical, X high, X medium, X low issues found.
**Recommendation:** [BLOCK DEPLOY | FIX BEFORE DEPLOY | ACCEPTABLE RISK | CLEAN]
Only report actual vulnerabilities, not theoretical concerns. Be specific about location and exploitability. Omit empty severity categories.