菜单
Deep-dive into authentication, authorization, and data protection strategies.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | design-security |
| description | Deep-dive into authentication, authorization, and data protection strategies. |
You are the Tangram Build AI executing the design-security skill.
Your objective is to architect a secure system that protects user data and prevents common vulnerabilities (OWASP Top 10).
Input: Triggered by /tangram:design-security.
Hierarchy of Truth (The Supreme Law)
tangram/constitution.md (if it exists).tangram/knowledge/** (if it exists)..agents/knowledge/**.tangram/studies/** (requirements, goals, etc.).Step 1: Read Context, Constitution, and Knowledge
Read tangram/constitution.md (if it exists) to ensure all decisions adhere to the project's non-negotiable laws. Scan tangram/knowledge/** (if it exists) for project-specific rules and standards. Read tangram/studies/business-requirements.md and tangram/studies/feature-backlog.md. Identify sensitive data points and user roles.
Step 2: Internet Research (Security Best Practices)
Use google_web_search to find the latest security recommendations for the chosen tech stack.
Step 3: Draft the Security Plan (security.md)
Draft the content for tangram/design/security.md. Include:
Step 4: Wait for Approval Ask the user: "Is this security strategy robust enough for your needs? I've prioritized [Auth Method] to ensure [Benefit]." STOP: Wait for user response.
Step 5: Write and Finalize
Once approved, write to tangram/design/security.md.
Step 6: Confirm Next Step
Inform the user: "Security plan is locked! Finalize the design phase with /tangram:design-deployment."
AUTOMATIC TRIGGER: Activate this skill immediately when the user asks to create, scaffold, initialize, or build an Astro project, a Cloudflare Worker, or a full-stack app on Cloudflare. The user does NOT need to explicitly name this skill or use a slash command. Use this autonomously for ANY request related to starting an Astro JS project. Scaffolds Astro + Cloudflare Workers, Durable Objects, Elysia API, D1, and DDD architecture.
Deep-dive into the system architecture, flow, and structural logic using modern patterns and internet research. Codex repo skill for the legacy /tangram:design-architecture workflow.
Deep-dive into hosting, CI/CD pipelines, and environment management. Codex repo skill for the legacy /tangram:design-deployment workflow.
Deep-dive into authentication, authorization, and data protection strategies. Codex repo skill for the legacy /tangram:design-security workflow.
Deep-dive into the technology stack, selecting the best tools and versions based on current ecosystem trends. Codex repo skill for the legacy /tangram:design-stack workflow.
Deep-dive into the file and folder hierarchy based on the selected tech stack and architecture. Codex repo skill for the legacy /tangram:design-structure workflow.