菜单
Context-aware security audit based on OWASP Top 10. Scans for vulnerabilities in code and configuration. Includes proactive secret scanning for API keys and credentials.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Enforces modularity, reusability (DRY), and high-level architectural patterns. Focuses on SOLID principles, Design Patterns, and Scalability.
Universal architectural auditor for any tech stack. Enforces Separation of Concerns, Clean Architecture, and best practices by identifying the project structure and detecting layer violations.
Defines rules for skill activation, including input requirements, output contracts, conflict lists, and performance costs. Enforces Lean Execution mode by default.
Implementation of Enterprise patterns: CQRS, Event Sourcing, Domain-Driven Design (DDD).
Generates robust, production-grade 3rd party API integrations with Retry, Rate Limiting, and DTOs.
Workflow for deeply researching and architecting a new module/feature. STRICTLY NO CODE EXAMPLES. Use this for high-level technical design and research before implementation.
| name | security-scan |
| description | Context-aware security audit based on OWASP Top 10. Scans for vulnerabilities in code and configuration. Includes proactive secret scanning for API keys and credentials. |
Merged: security-scan + secret-guard.
Proactively scan for leaked secrets:
sk_live_, AKIA, ghp_BEGIN RSA PRIVATE KEY, PEM filespostgres://, mysql:// with credentials.env files committed to version control.env files not in .gitignore.