메뉴
Start a Pi Security design review from a supported Confluence or Notion document URL or from inline Markdown, after explicit user confirmation. No attachments, local files, or binaries.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Submit a security report to Pi as inline Markdown with a .md or .markdown filename, after explicit user confirmation. Reports the queued ingestion workflow state truthfully.
Investigate Pi Security findings - list, locate, explain, summarize, or compare findings by FND-XXX ID, UUID, or Pi finding URL. Read-only; uses Pi's hosted MCP tools as evidence.
Fetch existing Pi remediation guidance for a finding or an SBOM package, and optionally prepare a missing package remediation plan after explicit user confirmation.
Review Pi Security posture - threat-model application and section context combined with Code Gatekeeper PR and issue reviews. Read-only; uses Pi's hosted MCP tools as evidence.
Get repo-specific Pi secure-development guidance for a concrete engineering task, optionally query tenant knowledge for a specific ambiguity, and record playbook feedback after confirmation.
| name | security-design-review |
| description | Start a Pi Security design review from a supported Confluence or Notion document URL or from inline Markdown, after explicit user confirmation. No attachments, local files, or binaries. |
Use this skill only when the user explicitly asks to start a Pi Security design review of a design document.
Both are state-changing and require confirmation:
pi_design_review_url_create - starts a design review for a supported Confluence or Notion document URL (url, http/https only).pi_design_review_markdown_create - starts a design review from inline Markdown design-document content (content, up to 5 MiB).Do not accept, convert, or promote any of the following into a design-review call:
file:// URIsIf the user offers one of these, explain that this workflow takes a supported Confluence/Notion URL or inline Markdown, and that other document types are handled in the Pi web app.