원클릭으로
github
GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Framework architect: audit Granit .NET modules against framework conventions, architecture rules, and CLAUDE.md standards. Checks module anatomy, DDD, naming, OpenAPI, persistence, validation, events, metrics, localization, documentation, and cross-cutting concerns. Invoke to verify convention compliance before merge or during tech-debt sprints.
Granit integration auditor: verify that a CONSUMING application (granit-showcase-dotnet, granit-microservice-template, or any host built on the Granit NuGet packages) wires the framework correctly. Builds a package→wiring matrix — every referenced Granit.* package must have its matching service registration, endpoints map, EF Core companion + migration, and provider hookup — then checks the host bootstrap, middleware order, persistence, auth, config, and localization. Invoke before shipping a host, after a framework bump, or when an endpoint/table silently goes missing.
Performance architect: audit Granit .NET modules for scalability bottlenecks and propose high-impact optimizations. Static analysis (EF Core query patterns, allocations/GC, async, caching, HTTP/serialization, messaging, startup/runtime, horizontal scaling) plus live profiling (dotnet-trace/counters/dump) and BenchmarkDotNet guidance. Multi-provider aware: PostgreSQL (primary), SQL Server, SQLite. Invoke before a load test, during a scaling sprint, or when an endpoint/job is slow.
Principal Application Security Architect: exhaustive security audit of the Granit framework. Covers IAM (BFF, DPoP, OIDC), AI/MCP security, data protection, multi-tenancy isolation, infrastructure resilience, and supply chain. Produces STRIDE threat models, CVSS-scored findings, FAPI/ISO 27001/GDPR gap analysis, and a prioritized remediation roadmap.
QA/DevSecOps engineer: full project quality audit or targeted MR review. Analyzes format, tests, local coverage (ReportGenerator), then SonarQube (quality gate, issues, hotspots, coverage). Detects regressions on modified files. Also generates UAT checklists from endpoint definitions. Invoke before a merge or to reduce technical debt.
DocuMaster: generate world-class technical documentation for Granit framework modules. Adapts to audience (developer, architect, integrator). Produces clear, engaging Markdown with diagrams, code samples, and callouts. Use when documenting a module, writing a guide, or creating an ADR.
| name | github |
| description | GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation. |
| argument-hint | [operation] [args] |
Before any command, detect the current repository:
REPO=$(gh repo view --json nameWithOwner -q .nameWithOwner)
Use $REPO in gh -R "$REPO" commands.
| Type | Label | Title prefix | Parent | Parent section |
|---|---|---|---|---|
| Epic | Type: Epic | [EPIC] | - | - |
| Feature | Type: Feature | [FEATURE] | Epic | ## Features |
| Story | Type: Story | [STORY] | Feature | ## User Stories |
| Bug | Type: Bug | [BUG] | - | - |
| Spike | Type: Spike | [SPIKE] | - | - |
| Tech Debt | Type: Tech Debt | [TECH DEBT] | - | - |
Title rules: no emoji, prefix in brackets, concise.
Language: All GitHub issues (titles, descriptions, comments) must be written in English — the granit-dotnet and granit-front repos are open-source.
GitHub supports native sub-issues. Use the Sub-issues API to create parent-child relationships:
# Attach a child issue to a parent
CHILD_ID=$(gh api repos/$REPO/issues/{child_number} --jq .id)
gh api repos/$REPO/issues/{parent_number}/sub_issues -X POST -F sub_issue_id="$CHILD_ID"
# List sub-issues of a parent
gh api repos/$REPO/issues/{parent_number}/sub_issues
Epic
└── Feature (sub-issue of Epic)
└── Story (sub-issue of Feature)
Always use the sub-issues API to establish hierarchy. Additionally, keep #N
references in the parent description for readability (section ## Features or
## User Stories).
Before creating, modifying, or closing an issue, always read the existing context:
When investigating a bug or refactoring request, search for related issues:
gh issue list -R "$REPO" --search "keyword"
gh issue view {number} -R "$REPO" --json body -q .body
- #N - short descriptionAlways use a HEREDOC for multi-line descriptions:
--body "$(cat <<'EOF'
content here
EOF
)"
Templates are in .github/ISSUE_TEMPLATE/.
See templates.md for structure per issue type.
Two persona registries:
governance-compliance/docs/03-organization/ORG-05-PERSONAS.mdNEVER invent a new persona.
Infra/governance personas: SRE, Ingénieur DevOps, Développeur, Architecte, DBA, RSSI, DPO, CTO, Direction, Directeur juridique, Auditeur interne, Auditeur externe, Utilisateur, Product Owner
Application personas: Visiteur, Utilisateur authentifié, Administrateur d'application, Approbateur, Gestionnaire de contenu
NEVER use hybrid roles ("slash roles" like SRE / DevOps).
Context (on-call, audit) goes in the story body, not in the persona.
governance-compliance/docs/03-organization/ORG-05-PERSONAS.md (infra/governance) · personas-applicatifs.md (application)