菜单
Use when scanning code and applying fixes — existing rules or generated ones; optional save/release. Entry point for /fix. Depends on: gomboc_community_flow_diagnose, gomboc_community_flow_apply_fix, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when scanning code for security/compliance issues — detect language, load policies, walk AST, report findings and rule coverage. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_walk.
Use when building an ORL rule package — workspace, AST explore, write rule/tests, test loop. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_setup_rule_workspace, gomboc_community_cap_orl_walk, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
Use when running orl test and iterating on a rule package until tests pass or the attempt budget is exhausted. Depends on: gomboc_community_cap_run_orl_test.
Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk.
Use when running `orl remediate` (dry-run or apply) against a workspace via Docker, writing a report and submitting it to integrations (non-blocking). Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_gomboc_mcp.
Use when applying a fix with an existing ORL rule or by generating a new one. Does not own save/release — callers (e.g. flow_fix Phase 3) handle enrich and push. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_remediate, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
| name | gomboc_community_flow_fix |
| description | Use when scanning code and applying fixes — existing rules or generated ones; optional save/release. Entry point for /fix. Depends on: gomboc_community_flow_diagnose, gomboc_community_flow_apply_fix, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule. |
Orchestrates the community in-context fix pipeline. Commands should load this skill and follow the phases below — do not duplicate long step docs in commands/fix.md.
| Parameter | Required | Description |
|---|---|---|
target | yes | File, directory, or glob |
concern | no | e.g. encryption, least privilege |
framework | no | e.g. CIS, NIST, PCI-DSS |
Execute gomboc_community_flow_diagnose for target (and filters).
Ask the user which findings to fix before continuing.
For each selected finding, execute gomboc_community_flow_apply_fix.
Show results after each fix. Continue to the next selected finding when fixing multiple.
For newly generated rules from Phase 2 (apply Path B packages under .orl-fixes/):
gomboc_community_task_enrich_rule, then ask about push.gomboc_community_task_release_rule.Do not rely on gomboc_community_flow_apply_fix for enrich/release — that flow applies fixes only.
orl commands.