소스 정보
- 저장소
- jgador/sqloom
- 최근 소스 활동
- 2026년 7월 20일 08:42
- 감지된 SKILL.md 언어
- 영어
- 스타
- 1
- 포크
- 0
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
메뉴
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/jgador/sqloom --skill sqloom명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Compare the current Windows Codex CLI bundled ripgrep version with the local system rg version and print a matching Winget install or update script when they differ. Use when the user asks whether their installed rg should be updated to match Codex, which rg/ripgrep version Codex CLI bundles on Windows, or why Codex and local PowerShell report different rg versions.
Run a fast read-only security leak check over staged changes, uncommitted diffs, named paths, or a branch diff against a base ref such as origin/master. Use for PR checks, pre-commit checks, and requests to scan newly introduced secrets or credentials; use security-audit instead for full repository, full history, all-blob, dependency, or code-level security audits.
Run a read-only full security audit of the current repository, combining a code-level vulnerability review with secret scanning across the working tree, the full git history, and every blob in the git object database. Use for authoritative full audits, committed-secret checks, dependency risk checks, and code-level vulnerability review; use security-audit-fast instead for staged, named-path, or branch-diff leak checks.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | sqloom |
| description | Guide tune-first Sqloom harness setup and command usage for ASP.NET Core apps. |
Use this skill when helping a user create or update a Sqloom harness, scaffold the Sqloom skill with sqloom init, or run Sqloom against an ASP.NET Core app. Default to sqloom tune when the user wants tuning or the complete Sqloom workflow. If a usable harness already exists, skip harness generation intake and route to the requested command. Do not generate harness files until the required intake is complete.
sqloom tuneTreat sqloom tune as the primary path for tuning. It is the simplest complete workflow because it runs replay -> observe -> correlate -> advise in one command and writes the stage artifacts together.
Use the individual commands as focused tools:
sqloom replay for replay-only checks.sqloom observe when the user only needs Query Store evidence.sqloom correlate when replay and Query Store artifacts already exist.sqloom advise when correlation evidence already exists and the user only needs advice or SQL proposals.sqloom init only to scaffold the Sqloom agent skill into a repository.Use references/commands.md for exact Sqloom commands, arguments, required options, defaults, allowed values, and option names. Do not infer CLI syntax from examples or prose when the command reference covers it.
sqloom tune for tuning unless the user asks for a specific stage or artifact-level command.$env:OPENAI_API_KEY examples as shell expansion into the --openai-api-key option, not as automatic Sqloom environment-variable loading.Sqloom.Testing From Consumer HarnessesDefault new harnesses to a .NET 10 C# file-based app that lives in the app repository as durable test-support source. Follow an established repository convention when one exists; otherwise generate tests/Sqloom/<app>/<profile>/Harness.cs in a dedicated non-project directory. Keep it outside artifacts/ and outside an existing SDK project directory unless that project explicitly excludes the file from its compile globs. Pin the public Sqloom.Testing package to the installed Sqloom tool version and reference the target app project with file-app directives:
#:sdk Microsoft.NET.Sdk.Web
#:property TargetFramework=net10.0
#:property ManagePackageVersionsCentrally=false
#:package Sqloom.Testing@<sqloom-version>
#:project <relative-app-project.csproj>
Determine <sqloom-version> from sqloom --version. Keep the path after #:project relative to Harness.cs when practical. The file needs a harmless valid entry point and exactly one public non-abstract ISqloomApplication implementation. Generate it once, commit it, and maintain its app startup, authentication, tenant, database, and replay setup like an integration-test fixture.
Existing project-backed harnesses remain supported. When updating one, keep its normal NuGet PackageReference to Sqloom.Testing; do not convert a working harness unless the user requests file-based generation.
Use using Sqloom.Testing; for ISqloomApplication, manifest, and session contracts. Use using Sqloom.Testing.AspNetCore; only when the harness needs the ASP.NET Core replay SQL capture helpers. Do not ask the user to reference Sqloom.Pipeline directly for normal harness work; Sqloom.Testing contains the shared Sqloom.Pipeline.* pipeline surface.
Inspect the target app project, controller source, and existing tests before asking questions. Look for:
ISqloomApplication harnessPrefer concrete evidence from the target repository over assumptions.
Ask at most three questions at a time. By default, Sqloom replay and tune use Microsoft Agent Framework through --replay-data-agent required to fill missing replay path, query, header, and body values. Do not ask the user to provide those HTTP request values unless one of these is true:
--replay-data-agent offCollect only the missing non-agent inputs needed for the intended command:
--app-project is neededWhen the target repository already answers one of these, state the observed value and do not ask for it again.
Before writing harness files, confirm the complete intake:
--replay-data-agent offGenerate the smallest C# file-based harness in durable test-support source, defaulting to tests/Sqloom/<app>/<profile>/Harness.cs. Use one committed harness per app/startup profile, not one per endpoint. The file references the public Sqloom.Testing package and target app project, starts the app, and exposes exactly one ISqloomApplication. Sqloom discovers controller methods and parameters from the target app project referenced by the harness or supplied with --app-project. Keep endpoint selection in the Sqloom command through --target "METHOD /path/template". Preserve the harness between runs and update it in place only when startup, hosting, auth, tenant, database bootstrap, source project selection, or app-owned replay policy changes.
Sqloom always builds .cs harness targets and requires .NET SDK 10 or later through the selected --dotnet-command. Do not pass --no-build for a file-based harness. Keep app-specific setup in the harness; do not add Sqloom runtime features for one app's setup. Keep ReplayProfile minimal: do not add personas or overlays solely to supply path, query, header, or body values when the default replay data agent can prepare them. Use overlays for app-owned deterministic values, non-GET opt-in, and skip rules.