메뉴
Deterministically orchestrate remediation for a validated DevForgeAI enterprise audit run through /remediate-audit. Use for explicit run IDs and normalized findings, not custody-chain story audits or raw Markdown findings.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Independently validate a pull request from another AI session before a human merge. Enforce CI/head-SHA triage, an isolated review worktree, repository gates, negative-path proof for guards, reproduced findings, a three-tier verdict, cold fix handoff, delta review, and an explicit merge-or-hold outcome. Use for delegated builder PR review, fix delta review, or agent-work validation. Do not use for your own uncommitted diff or a plain human-authored PR without delegation context.
Independently validate a pull request from another AI session before a human merge. Enforce CI/head-SHA triage, an isolated review worktree, repository gates, negative-path proof for guards, reproduced findings, a three-tier verdict, cold fix handoff, delta review, and an explicit merge-or-hold outcome. Use for delegated builder PR review, fix delta review, or agent-work validation. Do not use for your own uncommitted diff or a plain human-authored PR without delegation context.
Execute a rejected pull request's fix round as a cold implementer session. A reviewer found defects and wrote a handoff comment with numbered findings and C0–C7 checkpoints; work that punch list under invariants enforced by a PreToolUse hook and gate scripts — reproduce the reviewer's red before touching the tree, stay inside the handoff's fence, one `F<n>:` commit per finding, record the output of every acceptance criterion, post a closing report, and STOP without merging. Use whenever a review comes back with changes requested and you are handed the PR plus its findings. Do not use it to author the original plan (that is `delegate`), to build a slice from a plan with no prior review (that is `implement-workflow`), or to review someone else's PR (that is `review-workflow`).
Execute a rejected pull request's fix round as a cold implementer session. A reviewer found defects and wrote a handoff comment with numbered findings and C0–C7 checkpoints; work that punch list under invariants enforced by a PreToolUse hook and gate scripts — reproduce the reviewer's red before touching the tree, stay inside the handoff's fence, one `F<n>:` commit per finding, record the output of every acceptance criterion, post a closing report, and STOP without merging. Use whenever a review comes back with changes requested and you are handed the PR plus its findings. Do not use it to author the original plan (that is `delegate`), to build a slice from a plan with no prior review (that is `implement-workflow`), or to review someone else's PR (that is `review-workflow`).
Create Web, GUI, or Terminal design specifications in story, standalone, or extract mode from a customizable brief, brand, and visual direction; generate design.md, implementation artifacts, and web artifacts when the selected target is Web. Use through /create-design when a project needs a design source of truth or an existing mockup must be extracted.
Create Web, GUI, or Terminal design specifications in story, standalone, or extract mode from a customizable brief, brand, and visual direction; generate design.md, implementation artifacts, and web artifacts when the selected target is Web. Invoke explicitly with $spec-driven-design.
| name | remediating-devforgeai-audit |
| description | Deterministically orchestrate remediation for a validated DevForgeAI enterprise audit run through /remediate-audit. Use for explicit run IDs and normalized findings, not custody-chain story audits or raw Markdown findings. |
Receive explicit /remediate-audit <run-id> [--finding <id>] [--dry-run] [--resume] arguments. Reject raw Markdown as execution state.
audit-findings-status and require a validated durable register.audit-content-validate, audit-import-completed, and
audit-findings-build only for immutable completed-report intake.--dry-run stops before mutation.audit-remediation-record. Do not edit status, events, approvals,
evidence, closures, reports, or intake snapshots.audit-remediation-verify, then dispatch the read-only
audit-closure-verifier from a different actor.audit-remediation-compare only after protected-main re-audit and
audit-remediation-render only for a read-only projection.HALT on missing CLI, exit 127, malformed JSON, missing state/schema, stale generation, wrong commit/worktree, provider drift, invalid approval, or incomplete evidence. Do not mark a finding closed before human merge and protected-main re-audit. The shared CLI owns all policy; this skill is thin.