메뉴
Security review workflow for app code, secrets handling, MCP risks, and agentic attack surface. Use when code touches auth, user input, external tools, secrets, file access, or high-trust automation.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
API design guidance for resources, validation, error envelopes, pagination, and compatibility. Use when defining or reviewing HTTP APIs and service interfaces.
Backend architecture and API design guidance for service boundaries, validation, persistence, and caching. Use when building or refactoring backend flows and server-side systems.
Destructive-action warning workflow. Use when operations may delete files, rewrite git history, discard changes, or modify high-risk infrastructure and data paths.
Checkpoint workflow for capturing current state, decisions, and remaining work. Use before context switching, handing off work, or pausing a long-running task.
Shared implementation standards for maintainable, safe, and readable code. Use when writing or reviewing code to keep naming, structure, validation, and error-handling expectations consistent.
Multi-source research workflow for current topics that require citations, synthesis, and explicit confidence. Use for technical, product, market, or ecosystem investigations with evidence requirements.
SOC 직업 분류 기준
| name | security-review |
| description | Security review workflow for app code, secrets handling, MCP risks, and agentic attack surface. Use when code touches auth, user input, external tools, secrets, file access, or high-trust automation. |
| origin | unified |
| user-invocable | true |
Report issues by severity and include concrete remediation guidance.
