메뉴
Run the security-audit DSL against a closed scope and emit findings.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | security-review |
| description | Run the security-audit DSL against a closed scope and emit findings. |
| argument-hint | --spec=<path> [--cwd=<dir>] |
| user-invocable | true |
| disable-model-invocation | false |
spec_path degrades to status=needs_user.cwd (defaults to the process working tree).ok when every check passes and failed when any check fails (failing check names surface as repair commands).When the active profile is security, this skill is a required gate for phase close.
spec_path points at a readable declarative audit spec.A missing or unreadable spec_path degrades to status=needs_user, which routes the operator to an AskUserQuestion prompt for the audit spec rather than running an empty check set.
Skill envelope with header.skill = "/security-review". Body carries scope_id, spec_path, checks_run, and the per-check findings.
Model-only playbook for adding a property-based test that pins a function's invariant.
Dispatch a claimed wave to a runtime per the V8 session-reuse ladder.
Fresh-context verification of a phase deliverable or wave outcome. Spawns a fresh auditor subagent that re-reads the diff against the success criteria.
Auto-chained research follow-up skill with recursion guard for residual unknowns.
Resolve the Co-Authored-By trailer policy for the active repo.
Compress the session conversation when context approaches the limit.