菜单
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
Use when adding, removing, enabling/disabling, or reconfiguring a backend in the router's servers.yaml registry (URLs, namespaces, entrypoints, server_name/transform overrides).
| name | ci-failure-triage |
| description | Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors). |
Follow AGENTS.md first.
make ci-local and read the log to see which sub-target failed. It typically chains format-check lint-ci lint-loc typecheck test-fast test-integration, but repos vary (e.g. clinvar-link has no lint-loc) — trust the actual recipe/CI log, not this list.format-check) — run make format, re-check.lint-ci) — run make lint-fix; fix remaining findings by hand rather than blanket-ignoring.lint-loc, the per-file line budget in scripts/check_file_size.py, where present) — split the growing module along its seams; edit .loc-allowlist only with a tracked decomposition reason.typecheck) — run make typecheck; fix the type, don't add broad ignore_errors / # type: ignore.test-fast / test-integration) — fix code or test per the assertion; parser/data changes need fixture-backed coverage under tests/.make ci-local until green before handoff..loc-allowlist to dodge a needed split.ci-local.