菜单
Run a comprehensive security review of the entire repository.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
After a code change, test it end-to-end (bash, browser, or computer use — whichever fits) and then run `/simplify` to review and clean up the changed code. Use to confirm a change works and is tidy before wrapping up.
Create a git commit and push it
Create a git commit
Ask the user for maximum clarifications before acting on a prompt. Use when the user wants to ensure all ambiguity is resolved before work begins.
Write or refresh a README that earns the reader's attention — short, honest, with a real visual. Tailored to the project type.
Greenfield product spec for an empty repo. Clarifies scope, then challenges the idea — checking whether it already exists and whether the pain is real — before writing a concise spec.md.
| name | security-full |
| description | Run a comprehensive security review of the entire repository. |
| model | opus |
| effort | max |
Perform a comprehensive security review of the entire repository. Analyze all source files systematically. Identify real vulnerabilities, not hypothetical or stylistic concerns.
For each finding:
### [SEVERITY] Title
- **File:** path/to/file:line
- **Category:** e.g. injection, auth, data exposure, etc.
- **Issue:** what's wrong and why it's exploitable or dangerous
- **Fix:** concrete remediation (code snippet if short, otherwise description)
Severity levels: CRITICAL, HIGH, MEDIUM, LOW, INFO