用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/pluginagentmarketplace/custom-plugin-fullstack --skill fullstack-security命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
基于 SOC 职业分类
| name | fullstack-security |
| description | Security and performance - hardening, optimization, auditing |
| sasmp_version | 1.3.0 |
| bonded_agent | 07-security-performance |
| bond_type | PRIMARY_BOND |
| atomic | true |
| single_responsibility | security_performance |
| parameters | {"type":"object","required":["action"],"properties":{"action":{"type":"string","enum":["audit_security","optimize_performance","configure_caching","harden_infrastructure"],"description":"The specific security/performance action to perform"},"audit_type":{"type":"string","enum":["owasp","pci-dss","soc2","gdpr"],"default":"owasp"},"target":{"type":"string","enum":["frontend","backend","infrastructure","database"]},"severity_threshold":{"type":"string","enum":["critical","high","medium","low"],"default":"medium"}}} |
| returns | {"type":"object","properties":{"success":{"type":"boolean"},"vulnerabilities":{"type":"array"},"performance_report":{"type":"object"},"recommendations":{"type":"array","items":{"type":"string"}},"compliance_status":{"type":"object"}}} |
| retry | {"max_attempts":3,"backoff":"exponential","initial_delay_ms":1000,"jitter":true} |
| logging | {"level":"INFO","events":["vulnerability_found","performance_analyzed","hardening_applied"],"metrics":["vulnerability_count","performance_score","compliance_coverage"]} |
Atomic skill for security auditing and performance optimization.
Single Purpose: Audit security, optimize performance, and ensure compliance
audit_securityPerform security audit against specified standards.
// Input
{
action: "audit_security",
audit_type: "owasp",
target: "backend"
}
// Output
{
success: true,
vulnerabilities: [
{
severity: "high",
category: "A03:Injection",
title: "SQL Injection Risk",
location: "src/routes/users.ts:45",
remediation: "Use parameterized queries"
}
],
compliance_status: { owasp_score: 75, passing: 8, failing: 2 },
recommendations: ["Add input validation", "Implement CSP headers"]
}
optimize_performanceAnalyze and optimize application performance.
configure_cachingSet up caching strategies.
harden_infrastructureApply security hardening to infrastructure.
function validateParams(params: SkillParams): {
(!params.) {
{ : , : };
}
(params. === && !params.) {
{ : , : };
}
{ : };
}
| Error Code | Description | Recovery |
|---|---|---|
| CRITICAL_VULNERABILITY | Critical security issue found | Block deployment, immediate fix |
| PERFORMANCE_REGRESSION | Performance degraded | Rollback or optimize |
| COMPLIANCE_VIOLATION | Compliance requirement not met | Document and remediate |
| SCAN_FAILED | Security scanner failed | Use alternative tool |
{
"on_invoke": "log.info('fullstack-security invoked', { action, target })",
"on_vulnerability": "log.warn('Vulnerability found', { severity, category })",
"on_success": "log.info('Security check completed', { score, recommendations })",
"on_error": "log.error('Security skill failed', { error })"
}
import { describe, it, expect } from 'vitest';
import { fullstackSecurity } from './fullstack-security';
describe('fullstack-security skill', () => {
describe('audit_security', () => {
it('should detect OWASP Top 10 vulnerabilities', async () => {
const result = await fullstackSecurity({
action: 'audit_security',
audit_type: 'owasp',
target: 'backend'
});
expect(result.success).toBe(true);
expect(result.compliance_status.owasp_score).toBeDefined();
});
it('should provide remediation steps', async () => {
const result = await fullstackSecurity({
action: 'audit_security',
target: 'backend'
});
result.vulnerabilities.forEach(v => {
expect(v.remediation).toBeDefined();
});
});
});
describe('optimize_performance', () => {
it('should analyze Core Web Vitals', async () => {
const result = await fullstackSecurity({
action: 'optimize_performance',
target: 'frontend'
});
expect(result.success).toBe(true);
expect(result.performance_report.lcp).toBeDefined();
});
});
});
const securityChecklist = {
authentication: [
"Strong password policy enforced",
"MFA available and encouraged",
"Session timeout configured",
"Token rotation implemented"
],
authorization: [
"Role-based access control",
"Principle of least privilege",
"Resource-level permissions",
"Access logging enabled"
],
data_protection: [
"Encryption at rest",
"Encryption in transit (TLS 1.3)",
"PII handling compliant",
"Backup encryption enabled"
]
};
| Version | Date | Changes |
|---|---|---|
| 1.0.0 | 2024-01 | Initial release |
| 2.0.0 | 2025-01 | Production-grade upgrade with OWASP 2024 |