review-plan-security

星标2

分支0

更新时间2026年7月4日 14:35

Codex-primary single-round security review of the implementation plan across three axes before implementation.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

nirecom

nirecom/agents

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

Procedure

RPS-1. Resolve <PLANS_DIR> via skills/_shared/resolve-plans-dir.md. Identify <PLANS_DIR>/<session-id>-detail.md. Initialize EXTENSIONS_USED=0. RPS-2. Invoke "$AGENTS_CONFIG_DIR/skills/review-plan-security/scripts/run-codex-review-loop.sh" (Bash), exporting AGENTS_CONFIG_DIR, SESSION_ID, PLANS_DIR, EXTENSIONS_USED. Pass CTX_SURVEY_CODE, CTX_SURVEY_HISTORY, CTX_CONCERNS_LOG as env vars when available. Exit-code handling (SSOT: skills/_shared/codex-review-loop.md; exit 1 is TERMINAL):

exit 0 APPROVED → RPS-4 (no RISK items).
exit 1 NEEDS_REVISION → terminal; save stdout to <PLANS_DIR>/<session-id>-security-plan-codex-round-1-raw.md; present concerns with per-axis severity; propose mitigations; stop (no re-loop) → RPS-3.
exit 2 ESCALATE → run review-loop-summarize-concerns; present summary; stop → RPS-3.
exit 3 → silently launch plan-security-reviewer subagent; use its verdict for RPS-4.
exit 4 → HALT with blocking error; surface wrapper stderr; do NOT launch fallback agent.
exit 5 → does not occur (MAX_EXTENSIONS=0); treat as exit 4 HALT if received. RPS-3. Present concerns with per-axis severity and proposed mitigations before implementation proceeds. RPS-4. Summary — APPROVED: report no RISK items; NEEDS_REVISION: summarize mitigations.

Notes

The three security axes (Information Leakage / Third-Party Access / External Access) and their OWASP/CWE references live in the Codex prompt (bin/review-plan-codex) and the plan-security-reviewer fallback agent. For code-level pattern scanning after implementation, use /review-code-security.

同仓库更多 Skills

同仓库

clarify-intent

nirecom/agents

Conduct a decision-tree interview with the user to lock in requirements, motivation, scope, and non-goals before planning.

2026-07-112

make-detail-plan

nirecom/agents

Stage 3 of three-stage planning pipeline. Produce a file-level implementation plan via detail-planner/detail-reviewer loop, then get user approval. Inputs are confirmed intent (<session-id>-intent.md) and outline (<session-id>-outline.md) from prior stages.

2026-07-112

write-code

nirecom/agents

Edit source code for the current task. Delegates editing and lint/typecheck/self-repair to a subagent.

2026-07-112

write-tests

nirecom/agents

Plan and write test cases with high reasoning effort. Test iteration runs in a subagent to minimize confirmations.

2026-07-112

survey-code

nirecom/agents

Explore the codebase to understand existing patterns, constraints, and relevant files before planning.

2026-07-112

survey-history

nirecom/agents

Investigate git history, docs/history.md, and GitHub issue/PR timeline since the relevant issue opened, to surface changes that may invalidate the issue's premises.

2026-07-112

name	review-plan-security
description	Codex-primary single-round security review of the implementation plan across three axes before implementation.
model	opus
effort	medium
context	fork

Review security implications of the implementation plan via Codex (single round, no re-loop).

Procedure

exit 0 APPROVED → RPS-4 (no RISK items).
exit 1 NEEDS_REVISION → terminal; save stdout to <PLANS_DIR>/<session-id>-security-plan-codex-round-1-raw.md; present concerns with per-axis severity; propose mitigations; stop (no re-loop) → RPS-3.
exit 2 ESCALATE → run review-loop-summarize-concerns; present summary; stop → RPS-3.
exit 3 → silently launch plan-security-reviewer subagent; use its verdict for RPS-4.
exit 4 → HALT with blocking error; surface wrapper stderr; do NOT launch fallback agent.
exit 5 → does not occur (MAX_EXTENSIONS=0); treat as exit 4 HALT if received. RPS-3. Present concerns with per-axis severity and proposed mitigations before implementation proceeds. RPS-4. Summary — APPROVED: report no RISK items; NEEDS_REVISION: summarize mitigations.