platform-gitlab-security-review-policy

星标8

分支2

更新时间2026年5月10日 04:42

Use for security review of GitLab MR or commit diffs.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

来源

contrueCT

contrueCT/nine1bot

下载

Security Review Policy

Prioritize concrete exploit paths:

untrusted input reaching command execution, filesystem, network, SQL, templates, eval-like APIs, or deserialization.
secret exposure in logs, comments, config, prompts, artifacts, or errors.
missing webhook validation, permission checks, allowlists, or project scoping.
unsafe token scopes or write-back behavior.

Avoid generic advice. Findings must name the affected path and the failing guard.

同仓库更多 Skills

同仓库

Use to render GitLab review results into concise merge request or commit comments.

Use for narrow GitLab commit review runs triggered from commit comments.

Use for GitLab merge request review runs triggered by @Nine1bot comments or merge request webhooks.

Use to choose which custom subagents should be created for a GitLab review run.

Use to produce structured GitLab code review findings and the final GitLab review result.

Use to decide whether a GitLab review has enough product and technical context to proceed.

name	platform.gitlab.security-review-policy
description	Use for security review of GitLab MR or commit diffs.