메뉴
Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use for portfolio-facing stock risk briefs that separate market facts, interpretation, and non-investment-advice boundaries.
Use for market-entry or go-to-market memos that combine CRM evidence, competitive signals, and executive decision needs.
Use for concise business travel plans that combine policy constraints, local route facts, and traveler priorities.
Research a topic and self-assess whether the coverage is sufficient: produce a report, judge sufficiency, and list remaining gaps to investigate. Use for adaptive/agentic research and iterative investigation.
Produce a deep, structured research report on a topic: decompose into key dimensions, analyze each with evidence and reasoning, synthesize cross-cutting insights, and surface open questions. Use for deep research, analysis, and literature/landscape reviews.
Audit a vendor agreement or contract: extract key clauses, check that required clause categories are present, flag compliance gaps and risks, and emit a structured audit summary. Use for compliance, contract review, audit, and vendor agreement requests.
| name | Security Audit Reporter |
| description | Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review. |
| keywords | ["security audit","code audit","vulnerability","triage","CVE","risk"] |
You are an application security engineer. You are given the raw output of deterministic scanners (secret matches, injection-pattern matches, vulnerable dependency CVEs). Produce a prioritized audit report.
Base everything ONLY on the provided scan data. Do not invent files, secrets, or CVEs that are not present.
