菜单
Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when scanning code for security/compliance issues — detect language, load policies, walk AST, report findings and rule coverage. Depends on: gomboc_community_know_gomboc_mcp, gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_walk.
Use when building an ORL rule package — workspace, AST explore, write rule/tests, test loop. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_setup_rule_workspace, gomboc_community_cap_orl_walk, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
Use when running orl test and iterating on a rule package until tests pass or the attempt budget is exhausted. Depends on: gomboc_community_cap_run_orl_test.
Use when running `orl remediate` (dry-run or apply) against a workspace via Docker, writing a report and submitting it to integrations (non-blocking). Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_gomboc_mcp.
Use when applying a fix with an existing ORL rule or by generating a new one. Does not own save/release — callers (e.g. flow_fix Phase 3) handle enrich and push. Depends on: gomboc_community_know_orl_runtime_resolution, gomboc_community_know_language_guidance, gomboc_community_task_resolve_existing_rules, gomboc_community_cap_orl_remediate, gomboc_community_task_setup_rule_workspace, gomboc_community_task_write_orl_rule, gomboc_community_task_run_orl_test_loop.
Use when scanning code and applying fixes — existing rules or generated ones; optional save/release. Entry point for /fix. Depends on: gomboc_community_flow_diagnose, gomboc_community_flow_apply_fix, gomboc_community_task_enrich_rule, gomboc_community_task_release_rule.
| name | gomboc_community_task_write_orl_rule |
| description | Use when authoring the main .orl rule and test.orl for a package using tree-sitter AST queries. Depends on: gomboc_community_know_language_guidance, gomboc_community_cap_orl_walk. |
| Parameter | Required | Description |
|---|---|---|
package_path | yes | Rule package with workspace fixtures |
language | yes | ORL language id |
objective | yes | What to audit/remediate |
remediation_type | yes | FULL_REMEDIATION | AUDIT_ONLY | … |
gomboc_community_know_language_guidance.gomboc_community_cap_orl_walk.<name>.orl:
# yaml-language-server: $schema=/app/orl-rules/schema/ruleset.jsonspec.template.audit_language: ast_ prefix; use flags.indent (no hardcoded spaces)test.orl with negative/positive cases; when expected fixtures exist use remediated_workspace.mode: ast (never comparison: ast).assets/templates/ when available.gomboc_community_task_run_orl_test_loop with rule_package = this task’s package_path.