メニュー
Prepare production change requests with security impact assessment for CAB approval
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
| name | prod-change-request |
| description | Prepare production change requests with security impact assessment for CAB approval |
Invoke when preparing changes to production environments.
# Change Request: [CR-YYYY-NNN]
## Summary
[Brief description]
## Security Impact Assessment
- Security scan status: [PASSED / findings]
- New attack surface: [yes/no, details]
- Data impact: [PII changes? encryption changes?]
- Access control changes: [yes/no, details]
## Risk Assessment
- Risk level: LOW / MEDIUM / HIGH / CRITICAL
- Rollback time estimate: [minutes]
## Implementation Plan
1. [Step 1]
2. [Step 2]
## Rollback Plan
1. [Step 1]
2. [Step 2]
## Approvals Required
- [ ] Tech Lead
- [ ] Security Champion
- [ ] QA Lead
- [ ] CAB Chair