Menu
Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Load prompts from external files with path expansion.
SSE, WebSockets, LLM token streaming patterns.
Visual review pipeline for UI components.
Atomic commits, conventional commits, trunk-based development
Implement in thin vertical slices — one commit per task, testable, rollback-safe
Define requirements via spec-first before any code — PRD, edge cases, acceptance criteria
| name | security-hardening |
| description | Security gate — OWASP, SAST, secrets, MCP hardening, dependency audit |
Código inseguro em produção = pesadelo. Isso é não-negociável.
| Domain | Coverage |
|---|---|
| SAST | SQL injection, XSS, CSRF, path traversal, command injection |
| MCP | Credential leakage prevention, tool access control, input sanitization |
| Secrets | No hardcoded keys, tokens, passwords in code/logs |
| Deps | Known CVEs, outdated packages, deprecated libs |
| Container | Non-root user, health checks, minimal base images |
mcp_tools YAML fieldpip-audit --requirement requirements.txt
npm audit