メニュー
Phase 4 of security audit pipeline. Implements the fix to pass the failing security test from Phase 3. Loops back to Phase 3 for the next item. Invoke with '/4-security-fix' after Phase 3 creates the failing test.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/opsMachine/OM-Agency --skill 4-security-fixコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
SKILL.md を表示中
| name | 4-security-fix |
| description | Phase 4 of security audit pipeline. Implements the fix to pass the failing security test from Phase 3. Loops back to Phase 3 for the next item. Invoke with '/4-security-fix' after Phase 3 creates the failing test. |
| contract | {"tags":["security","audit","security-phase-4","implementation"],"state_source":"security_plan","inputs":{"params":[],"gates":[{"field":"current_item.test","value":"Written"}]},"outputs":{"mutates":[{"field":"current_item.status","sets_to":"DONE"}],"side_effects":[]},"next":["3-security-spec"],"human_gate":false} |
Fix the vulnerability. Make the failing test pass. Mark the item done.
Read the failing test from Phase 3.
Fix the application code to address the vulnerability.
Mark done. Update SECURITY_PLAN.md — set this item's status to DONE.
End-of-skill check: See
shared/primitive-updates.md. Signals: architectural constraints, code that must not be refactored.
If there are more Pending items in the backlog, loop back to Phase 3: /3-security-spec
Otherwise, the security audit is complete.
SOC 職業分類に基づく
Performs comprehensive, brutally honest full-codebase review as a grumpy but fair senior developer with 20+ years of experience. Use when the user asks for a grumpy dev code review, brutal code review, senior dev review, comprehensive codebase audit, hall-of-shame code smells, or a gut-check on the entire project (not just a PR diff).
Diagnose and fix OneCLI gateway issues — Docker not running, 407 proxy auth, 401 from API (MITM not active), stale aoc_ token, CA cert refresh, secret setup, version pinning. Use when onecliStart fails, update-fathom-db fails, proxy returns 407 or 401, mode=tunnel in logs, or after OneCLI container recreation.
ANY CRM or progress.md write, log call, add contact, pipeline lookup, paste transcript/email. Runs lifecycle routing in Step 0 — delivery work goes to progress.md not Won CRM Next Action. Query before create. For week view use week-scan not this skill. OM-Repo SKILLS-MAP.md.
