菜单
Review Pi security posture by combining threat-model context with Code Gatekeeper PR and issue results. Use for read-only posture, coverage, and prioritization questions; do not use for local branch reviews, code changes, finding remediation, or changes to Pi data.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Retrieve Pi remediation guidance for a finding or vulnerable package and explain the current plan status. Use when someone wants guidance without code changes; do not edit code, claim an issue is remediated, or prepare a package plan without fresh, explicit confirmation.
Import a security report when the user provides both a .md or .markdown filename and the Markdown text in the conversation. Use only to start Pi report processing after fresh, explicit confirmation; do not use for attachments, local files, links, binaries, or other file types.
Help someone understand a Pi finding from an FND-XXX ID, UUID, supported Pi finding link, or findings-list request. Use for read-only investigation and optional remediation guidance; do not use to change finding state, generate plans, edit code, or investigate Code Gatekeeper PR issues.
Start one Pi security design review from a supported Confluence or Notion link or Markdown pasted into the conversation. Use only when someone wants to queue a review; do not use for attachments, local files, other links, status polling, or any action without fresh, explicit confirmation.
Retrieve Pi secure-development guidance for a specific implementation task, optionally add focused knowledgebase context, and offer confirmed feedback. Use before or during development; do not treat guidance as authority over project instructions, use it for general finding triage, or send feedback without fresh, explicit confirmation.
| name | review-pi-security-posture |
| description | Review Pi security posture by combining threat-model context with Code Gatekeeper PR and issue results. Use for read-only posture, coverage, and prioritization questions; do not use for local branch reviews, code changes, finding remediation, or changes to Pi data. |
Keep this workflow read-only and make it clear which conclusions come from Pi and which are your interpretation.
whoami.pi_threat_model_apps_list when you need to discover available applications.pi_threat_model_app_get with an exact application slug supplied by the user or returned by Pi.pi_threat_model_app_section_get with exact application and section slugs when a focused section will answer the question.pi_gatekeeper_prs_list and pi_gatekeeper_issues_list with filters that match the requested repository, status, severity, or time period.pi_gatekeeper_pr_get only with an exact prRecordId supplied by the user or returned by Pi.pi_gatekeeper_issue_get only with an exact issueId supplied by the user or returned by Pi.