菜单
Review Swoosh tool, permission, prompt, and daemon API changes for safety regressions.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Multi-file checklist for adding a new SwooshPermission case. Use when adding a permission, exposing a new capability that needs firewall gating, or wiring a new Scout source / tool family / API surface that requires its own grant. Encodes the enum + profile grants + docs + tool wiring + test path so nothing is forgotten.
Interact with Jupiter Lend Protocol. Read-only SDK (@jup-ag/lend-read) for querying liquidity pools, lending markets (jlTokens), and vaults. Write SDK (@jup-ag/lend) for lending (deposit/withdraw) and vault operations (deposit collateral, borrow, repay, manage positions).
Migration guide from Jupiter Metis (v1) or Ultra to Swap API v2. Use when migrating existing Jupiter swap integrations, updating base URLs, or transitioning from quote+swap-instructions to the unified build endpoint.
Use when a user mentions Jupiter token verification, VRFD eligibility, paying 1000 JUP to verify a token, submitting a verification request, or updating metadata via the Jupiter express verification flow.
Use Bags for Solana token launch planning, agent authentication, launch intent creation, and launch transaction creation through the official Bags API.
Use Flap for BNB Chain token trading, wallet and bot integrations, token-launcher flows, VaultPortal launches, deployed contract references, and Blink-style surfaces.
| name | swoosh-security-review |
| description | Review Swoosh tool, permission, prompt, and daemon API changes for safety regressions. |
Use this when work touches tools, permissions, prompt assembly, Scout data, secrets, crypto, API auth, or the daemon boundary.
SwooshFirewall.humanOnly tools cannot be called by model-origin requests./api/* routes require bearer auth or deny all requests when no token exists.