菜单
Aggregated security context for a scope — STRIDE threats + OWASP refs + NIST controls + prior threat-model docs. PURE data; the Security persona is in the parent agent's prompt.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | context-security |
| description | Aggregated security context for a scope — STRIDE threats + OWASP refs + NIST controls + prior threat-model docs. PURE data; the Security persona is in the parent agent's prompt. |
| version | 0.1.0 |
| purity | pure-data |
| runtime | research-runner |
| command | npx @maintainabilityai/research-runner@~0.1.64 skill-context-security |
The security-side companion to context-architecture. Walks the mesh and assembles the structured-data input the Security persona reasons against.
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
platformId | string | yes | — | Platform to aggregate over. |
barIds | string[] | yes | — | BARs to aggregate over. |
| Field | Type | Description |
|---|---|---|
ok | boolean | |
threats | ThreatEntry[] | STRIDE entries applicable to the scope. |
securityControls | SecurityControl[] | Already-in-place controls per BAR. |
owaspRefs | { category: "A0X", description }[] | OWASP A01-A10 references the in-scope BARs map to. |
nistControls | { id, family, description }[] | NIST 800-53 control refs. |
priorThreatModels | { barId, path, lastReviewed }[] | Existing threat-model docs to ground against. |
echo '{"platformId":"PLT-IMDB","barIds":["APP-IMDB-002"]}' \
| npx @maintainabilityai/research-runner@~0.1.64 skill-context-security
Aggregates from threats/, controls/, each BAR's security/, and compliance-checklist.yaml. CLI subcommand backend lands in B-PR1a.
{ok: false, reason: 'mesh-walk-failed'} only on filesystem errors. Sparse BARs return ok: true with empty arrays — this is by design and drives the Restricted tier.
Append one hash-chained audit event to okrs/<id>/audit/events/<run-id>.jsonl. Returns the new chain head.
Replay the hash chain over an existing audit JSONL; returns the chain head on success, the first integrity failure reason on failure.
Query the mesh's threat library for entries matching a concern (e.g. "identity", "data-licensing").
Academic paper search via arXiv. Returns ranked paper results per query envelope.
Aggregated architecture context for a scope — CALM nodes + ADRs + fitness functions + quality attributes. PURE data; the Architect persona is in the parent agent's prompt.
Aggregated quality context for a scope — quality attribute definitions + performance SLOs + reliability targets per BAR.