菜单
Trigger for code security scanning, vulnerability assessment, SAST/DAST analysis, and compliance checks. Use when asked to audit code, scan for vulnerabilities, review dependencies, or prepare security reports.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use for deploying Asgard services, managing Docker containers, docker-compose operations, CI/CD pipeline tasks, and environment management. Trigger on deploy, release, build, or infrastructure requests.
Use this skill to generate or update ISO 29110 compliance documents (SI-02, PM-02, SI-04, PM-01). Trigger when asked to create release documentation, update sprint records, or prepare audit-ready compliance artifacts.
Use this skill for medical literature research, clinical evidence synthesis, and drug interaction analysis. Trigger on queries involving medical topics, clinical guidelines, treatment protocols, or healthcare evidence review.
Use this skill to generate comprehensive patient summaries from EMR data. Trigger when asked to summarize a patient's medical history, create handoff reports, or prepare clinical documentation from structured health records.
| name | security-audit |
| description | Trigger for code security scanning, vulnerability assessment, SAST/DAST analysis, and compliance checks. Use when asked to audit code, scan for vulnerabilities, review dependencies, or prepare security reports. |
| version | 1.0 |
| author | asgard-team |
| tags | ["security","audit","vulnerability","compliance","scanning"] |
| tools | ["huginn_scan","fenrir_execute"] |
Comprehensive security scanning and vulnerability assessment skill. Integrates with Huginn (Semgrep + Trivy) for SAST, container scanning, and dependency auditing across the Asgard ecosystem.
huginn_scan with Semgrep rules for: