菜单
Scan code changes for security vulnerabilities including OWASP Top 10, hardcoded secrets, injection flaws, and authentication issues. Use after implementation to catch security problems before marking a task complete.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | security-review |
| description | Scan code changes for security vulnerabilities including OWASP Top 10, hardcoded secrets, injection flaws, and authentication issues. Use after implementation to catch security problems before marking a task complete. |
| metadata | {"author":"task-factory","version":"1.0","type":"follow-up","hooks":"pre-planning,pre,post"} |
Perform a security review of all code changes you just made for this task.
Use task-factory CLI commands to manage workspaces, tasks, and workflows. Use when the user needs to create tasks, manage task execution, check queue status, or work with the Task Factory system via CLI.
Capture a browser screenshot for task validation and attach it to the active task using attach_task_file.
Create a branch, commit all agent changes, push, and open a pull request. Use when work is ready for review and should be submitted as a PR rather than just checkpointed.
Commit and push the agent's current work without opening a PR. Stages only files modified by the agent, creates a descriptive commit message, and pushes to the current branch.
Review all code changes for bugs, edge cases, naming, complexity, and missing error handling. Use after completing implementation work to catch issues before marking a task complete.
Repeatedly check if there is more work to do until the task is truly complete. Use after implementation to ensure nothing was missed against the acceptance criteria.
