メニュー
Security review workflow for app code, secrets handling, MCP risks, and agentic attack surface. Use when code touches auth, user input, external tools, secrets, file access, or high-trust automation.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
API design guidance for resources, validation, error envelopes, pagination, and compatibility. Use when defining or reviewing HTTP APIs and service interfaces.
Backend architecture and API design guidance for service boundaries, validation, persistence, and caching. Use when building or refactoring backend flows and server-side systems.
Destructive-action warning workflow. Use when operations may delete files, rewrite git history, discard changes, or modify high-risk infrastructure and data paths.
Checkpoint workflow for capturing current state, decisions, and remaining work. Use before context switching, handing off work, or pausing a long-running task.
Shared implementation standards for maintainable, safe, and readable code. Use when writing or reviewing code to keep naming, structure, validation, and error-handling expectations consistent.
Multi-source research workflow for current topics that require citations, synthesis, and explicit confidence. Use for technical, product, market, or ecosystem investigations with evidence requirements.
| name | security-review |
| description | Security review workflow for app code, secrets handling, MCP risks, and agentic attack surface. Use when code touches auth, user input, external tools, secrets, file access, or high-trust automation. |
| origin | unified |
| user-invocable | true |
Report issues by severity and include concrete remediation guidance.
