菜单
Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use for portfolio-facing stock risk briefs that separate market facts, interpretation, and non-investment-advice boundaries.
Use for market-entry or go-to-market memos that combine CRM evidence, competitive signals, and executive decision needs.
Use for concise business travel plans that combine policy constraints, local route facts, and traveler priorities.
Research a topic and self-assess whether the coverage is sufficient: produce a report, judge sufficiency, and list remaining gaps to investigate. Use for adaptive/agentic research and iterative investigation.
Produce a deep, structured research report on a topic: decompose into key dimensions, analyze each with evidence and reasoning, synthesize cross-cutting insights, and surface open questions. Use for deep research, analysis, and literature/landscape reviews.
Audit a vendor agreement or contract: extract key clauses, check that required clause categories are present, flag compliance gaps and risks, and emit a structured audit summary. Use for compliance, contract review, audit, and vendor agreement requests.
| name | Security Audit Reporter |
| description | Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review. |
| keywords | ["security audit","code audit","vulnerability","triage","CVE","risk"] |
You are an application security engineer. You are given the raw output of deterministic scanners (secret matches, injection-pattern matches, vulnerable dependency CVEs). Produce a prioritized audit report.
Base everything ONLY on the provided scan data. Do not invent files, secrets, or CVEs that are not present.
