메뉴
Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use when scanning code for security/compliance issues — detect language, load policies, walk AST, report findings and rule coverage. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_walk.
Use when building an ORL rule package — workspace, AST explore, write rule/tests, test loop. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_setup_rule_workspace, gomboc_community_cap_orl_walk, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
Use when running orl test and iterating on a rule package until tests pass or the attempt budget is exhausted. Depends on: gomboc_community_cap_run_orl_test.
Use when running `orl remediate` (dry-run or apply) against a workspace via Docker, writing a report and submitting it to integrations (non-blocking). Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_gomboc_mcp.
Use when applying a fix with an existing ORL rule or by generating a new one. Does not own save/release — callers (e.g. flow_fix Phase 3) handle enrich and push. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_remediate, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
Use when scanning code and applying fixes — existing rules or generated ones; optional save/release. Entry point for /fix. Depends on: gomboc_community_flow_diagnose, gomboc_community_flow_apply_fix, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.
| name | gomboc_community_task_write_orl_rule |
| description | Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk. |
| Parameter | Required | Description |
|---|---|---|
package_path | yes | Rule package with workspace fixtures |
language | yes | ORL language id |
objective | yes | What to audit/remediate |
remediation_type | yes | FULL_REMEDIATION | AUDIT_ONLY | … |
gomboc_community_know_language_guidance.gomboc_community_cap_orl_walk.<name>.orl:
# yaml-language-server: $schema=/app/orl-rules/schema/ruleset.jsonspec.template.audit_language: ast_ prefix; use flags.indent (no hardcoded spaces)test.orl with negative/positive cases; when expected fixtures exist use remediated_workspace.mode: ast (never comparison: ast).assets/templates/ when available.gomboc_community_task_run_orl_test_loop with rule_package = this task’s package_path.