菜单
Scan jhelm code for security vulnerabilities (OWASP patterns, path traversal, injection risks)
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | security-audit |
| description | Scan jhelm code for security vulnerabilities (OWASP patterns, path traversal, injection risks) |
| argument-hint | ["module or file path"] |
| allowed-tools | Bash(./mvnw *), Bash(grep *), Read, Glob, Grep |
Scan the codebase (or specific module/file) for common security vulnerabilities.
If $ARGUMENTS is provided, limit the scan to that module or path. Otherwise, scan all modules.
Search for file path construction from untrusted input:
Grep for: new File(.*,.*getName|new File(.*,.*entry|Path.of(.*input|Paths.get(.*input
Verify each hit has canonical path validation or sanitization.
Search for Runtime.exec, ProcessBuilder with user input:
Grep for: Runtime.getRuntime|ProcessBuilder|\.exec\(
Verify arguments are not constructed from user input without sanitization.
Search for unsafe YAML parsing:
Grep for: new Yaml\(\)|Yaml.load\(|ObjectMapper.*readValue.*untrusted
Verify SnakeYAML SafeConstructor is used, or Jackson is configured safely.
Search for XML parsing without disabling external entities:
Grep for: DocumentBuilder|SAXParser|XMLReader|TransformerFactory
Search for credentials, tokens, or keys in code:
Grep for: password|secret|token|apiKey|private.key (case-insensitive, exclude test files)
Verify no hardcoded credentials exist.
Check REST endpoints and CLI argument handlers validate input:
| Severity | Location | Issue | Recommendation |
|---|---|---|---|
| CRITICAL | file:line | Description | Fix suggestion |
| HIGH | file:line | Description | Fix suggestion |
| MEDIUM | file:line | Description | Fix suggestion |
| LOW | file:line | Description | Fix suggestion |
Report only confirmed findings, not theoretical risks. If clean, say "No vulnerabilities found."
Check and fix Checkstyle violations in jhelm modules
jhelm project coding standards and conventions for Java 21 with Lombok and Maven
Implement a GitHub issue with branch and pull request workflow
Auto-format, fix violations, and run Maven validate (PMD + Checkstyle) in one step
jhelm project architecture and module structure for a Java Helm implementation
Code review automation for Java, TypeScript, JavaScript, Python, Go. Analyzes PRs for complexity and risk, checks code quality for SOLID violations and code smells, generates review reports. Use when reviewing pull requests, analyzing code quality, identifying issues, generating review checklists.