菜单
Stop CodeQL residual thrashing on Percussion CMS PRs. Use when working code-scanning alerts, security advisories, SSRF/LDAP/path/XXE fixes, // codeql suppressions, query-filters, model packs, or PR checks named CodeQL / Analyze (java-kotlin).
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
基于 SOC 职业分类
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/intersoftdatalabs-in/percussioncms --skill codeql-pr命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Add a new locale (language) to Percussion CMS, with translated strings in CmsUi.tmx and SystemResources.tmx, an RXLOCALE seed row, optional calendar picker / Lucene analyzer touch-points, and a back-fill via the Docker translate-shell script. Use when the user says "add a new locale", "add a new language", "support <locale> translations", "translate to <lang>", "add <code> to the language matrix", "RXLOCALE row for <code>", or any variant thereof. Canonical source of truth is modules/perc-i18n/AGENTS.md; this skill is a develop checklist around it.
Strict pre-commit / pre-PR code review for Percussion CMS (Erlang persona). Use when the user says "Erlang", "review my changes", "pre-commit review", "pre-PR review", "strict review", or before git commit / gh pr create. Independent review only; blocks on bugs, missing behavioral tests, and non-portable (Windows/Unix) file path handling. Loads review memory and writes durable reports under docs/ai-generated/code-reviews/.
A skill for writing clean, maintainable, and effective Java unit tests using JUnit 5 and Mockito. Use when the user asks for "unit tests", "test cases", "tests", "JUnit", "Mockito", or related terms. Also use for migrating JUnit 3/4 tests to JUnit 5.
| name | codeql-pr |
| description | Stop CodeQL residual thrashing on Percussion CMS PRs. Use when working code-scanning alerts, security advisories, SSRF/LDAP/path/XXE fixes, // codeql suppressions, query-filters, model packs, or PR checks named CodeQL / Analyze (java-kotlin). |
docs/ai-generated/tasks/gh-codeql-alerts/codeql-pr-playbook.md
.github/workflows/codeql.yml + codeql-config.yml + .github/codeql/models). Scope: Java + JavaScript/TypeScript only.not-configured. GitHub Code Quality (dynamic Code Quality: CodeQL Setup) must stay disabled (Settings → Code quality) — it ignores advanced config and can mass-close alerts.// codeql[rule-id] → path query-filters → dismiss last.// codeql[rule-id] on the alert line or the single line immediately above a one-line sink. Multi-line builders with a comment three lines up fail. No long justification: on the Java line — Spotless/google-java-format rewraps long trailing comments off the sink; put rationale in suppressions.md.spotless:apply: re-check in-scope // codeql[ placement (see playbook "CodeQL annotations and Spotless").resolveReviewThread (root AGENTS.md).gh api repos/intersoftdatalabs-in/percussioncms/code-scanning/default-setup --jq .state
# expected: not-configured
If configured:
gh api --method PATCH repos/intersoftdatalabs-in/percussioncms/code-scanning/default-setup \
-f state=not-configured
| Kind | Model kind string | Example type |
|---|---|---|
| SSRF | request-forgery | URLValidation |
| LDAP | ldap-injection | PSJndiUtils.escapeLdapFilter |
| Path | path-injection | PSPathInjectionGuard |
| XXE | xxe | PSSecureXMLUtils.getSecuredSaxSource |
Edit .github/codeql/models/models/*.model.yml, bump pack version in codeql-pack.yml, document in suppressions.md if replacing a path exclude.
./mvnw tests green// codeql[rule-id]; long text in suppressions.md)not-configuredSee docs/ai-generated/tasks/gh-codeql-alerts/codeql-pr-playbook.md for architecture, metrics, and dismiss API details.