菜单
Start a Pi Security design review from a supported Confluence or Notion document URL or from inline Markdown, after explicit user confirmation. No attachments, local files, or binaries.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Submit a security report to Pi as inline Markdown with a .md or .markdown filename, after explicit user confirmation. Reports the queued ingestion workflow state truthfully.
Investigate Pi Security findings - list, locate, explain, summarize, or compare findings by FND-XXX ID, UUID, or Pi finding URL. Read-only; uses Pi's hosted MCP tools as evidence.
Fetch existing Pi remediation guidance for a finding or an SBOM package, and optionally prepare a missing package remediation plan after explicit user confirmation.
Review Pi Security posture - threat-model application and section context combined with Code Gatekeeper PR and issue reviews. Read-only; uses Pi's hosted MCP tools as evidence.
Get repo-specific Pi secure-development guidance for a concrete engineering task, optionally query tenant knowledge for a specific ambiguity, and record playbook feedback after confirmation.
| name | security-design-review |
| description | Start a Pi Security design review from a supported Confluence or Notion document URL or from inline Markdown, after explicit user confirmation. No attachments, local files, or binaries. |
Use this skill only when the user explicitly asks to start a Pi Security design review of a design document.
Both are state-changing and require confirmation:
pi_design_review_url_create - starts a design review for a supported Confluence or Notion document URL (url, http/https only).pi_design_review_markdown_create - starts a design review from inline Markdown design-document content (content, up to 5 MiB).Do not accept, convert, or promote any of the following into a design-review call:
file:// URIsIf the user offers one of these, explain that this workflow takes a supported Confluence/Notion URL or inline Markdown, and that other document types are handled in the Pi web app.