菜单
Reviews Meridian security posture, including secrets, threat model, AI-agent safety, OWASP, dependencies and Git hygiene. Use for 02_security.md or security hardening.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Creates a Meridian user story in SQLite after epics and versions exist. Use when adding work to the backlog with concrete acceptance criteria.
Refines a Meridian user story in SQLite for implementation — deepens Approach, architecture refs and tests. Use between /create-us and coding.
Gates implementation of a Meridian user story — verifies ready true, Plan, deps and architecture refs before product code. Use with /implement-us US-XXXX.
Maintainer procedure to add or change Meridian kit artifacts — skill, agent, workflow, routing, and every registry surface. Use when extending the harness, creating /investigate, or onboarding a new slash command.
Closes a Meridian sprint in SQLite after sprint review — fills Retrospective, sets status complete, logs decisions. Use with /complete-sprint vX-SY.
Closes a Meridian user story in SQLite after implementation — fills Record, acceptance, status. Use when marking US done or after /implement-us.
| name | security-review |
| description | Reviews Meridian security posture, including secrets, threat model, AI-agent safety, OWASP, dependencies and Git hygiene. Use for 02_security.md or security hardening. |
| allowed-tools | Read, Glob, Grep, Bash, Edit, Write |
Security before architecture and before agents execute sensitive work.
| Workflow | Purpose |
|---|---|
/security-pass | Create/update 02 — Phase 2 doc pass |
/privacy-pass | LGPD + GDPR sections in 02 |
/security-review | Audit code vs 02 + US (no code) |
/dependency-audit | Lockfiles and supply chain report |
| File | When to read |
|---|---|
.agent/references/templates/phase-docs/02-security.md | Init — § Document stub to create docs/02_security.md |
references/security-doc-checklist.md | Mandatory — structure of 02 at init and pass |
references/security-bootstrap.md | Mandatory — /security-pass bootstrap |
references/privacy-compliance-checklist.md | Mandatory — /privacy-pass (LGPD + GDPR) |
references/privacy-bootstrap.md | Mandatory — /privacy-pass bootstrap |
references/checklists.md | /security-pass full or deep 02 review |
references/implementation-security-checklist.md | Mandatory — /security-review |
references/supply-chain-checklist.md | Mandatory — /dependency-audit |
/security-pass, /privacy-pass, /security-review, /dependency-audit02_security.md05_architecture.md goes to approved/complete-us on Must US with security acceptance00_scope.md, 01_tech_stack.md, 03_user_types.md (context).references/checklists.md; update 02_security.md.implementation-security-checklist.md; report gaps only.supply-chain-checklist.md; report gaps only.update-decisions-log.02_security.mdSecurity review:
02_security status:
Critical gaps:
Decisions logged:
Blocked until: