メニュー
Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Address pending PR review feedback through verified triage, small fix phases, implementation, validation, and evidence-backed replies. Manual invocation only.
Autonomous iteration loop for a measurable goal: review, ideate, modify, verify, keep or rollback, repeat until interrupted or capped.
Monitor a PR's CircleCI pipeline, diagnose failures, apply scoped fixes, push when requested, and continue until green or blocked.
Stage and commit changes in logical groups using the project's git message style, without mixing unrelated user changes.
Create or update a GitHub PR with concise description, review guidance, triggered specialty reviews, and focus areas.
Build a daily work brief from yesterday/off-hours activity plus today's Linear, Calendar, Gmail, and Notion context; update Notion and produce standup/checklist.
| name | security-audit |
| description | Deep security audit for code changes or areas: auth/authz, data exposure, injection, secrets, dependency risk, and OWASP-style issues. |
Review for concrete exploitable or data-exposure risk.
Read ~/.claude/rules/review-finding-format.md, ~/.claude/rules/pr-mode-readonly.md, and ~/.claude/rules/model-escalation.md when available. Use ~/.agents/rules/ under Codex. For full checklist, read references/protocol-index.md.
Findings must include affected asset/data, attacker or misuse path, evidence, impact, and concrete mitigation.
