菜单
Security guardrails pack — injection, secrets, path traversal, auth defaults, deserialization, untrusted-content discipline. Use when asked for a security pass or when code touches user input, secrets, or auth.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | kit-security |
| description | Security guardrails pack — injection, secrets, path traversal, auth defaults, deserialization, untrusted-content discipline. Use when asked for a security pass or when code touches user input, secrets, or auth. |
Read and apply to the current task, citing rule IDs with one line of evidence as they fire:
Install or upgrade the guardrails kit into a project with an existing CLAUDE.md by executing MIGRATE.md exactly. Use when asked to migrate a CLAUDE.md, install the kit, or retrofit guardrails into a project.
Reasoning scaffolds pack — worked-example traces, counterexample hunts, invariants, options enumeration. Use when writing algorithms, recursion, parsers, state machines, index math, or choosing between design approaches.
Health-check the installed guardrails kit — markers, doc set, versions, STATE.md shape, drift. Use when asked to check the kit installation, diagnose guardrails problems, or after upgrading the kit.
Post-compaction/resume recovery for the guardrails kit — re-run the SESSION.md S1 sequence manually. Use after a compaction, /resume, or when session context feels lost or stale.
Angular guardrails pack — signals, change detection, @for track, RxJS teardown, standalone defaults, plus UI state/a11y discipline. Use when writing Angular components, templates, or services.
Audit guardrails-kit compliance of the current session — run the transcript marker scorecard. Use when asked to audit compliance, check which guardrail rules fired or were missed, or score the session.
