菜单
Per-task security review — webhook signature verification, secrets hygiene, input validation, error hygiene, logging/PII, SQL safety, signed URL TTL, authz, deserialization. Owns Gate 3 (pass/fail).
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Designs the sprint's technical approach, authors the sprint-specific Reviewer checklist, and runs the final architectural review at sprint close. Also pulls in at strike 3 as an escalation partner. Does not write production code.
Writes production code to make failing tests pass for the current task. Bound by declared file ownership and the full styleguide. Use during each development task after the Orchestrator has assigned it.
Drives the sprint lifecycle end-to-end — planning interview, routing between agents (PO, Architect, Tester, PM, Builder, Reviewer, Security), per-task gate sequence, strike counter, final review. Use when the user wants to start, resume, or drive a sprint. Never writes production code or tests.
Q&A script the Orchestrator runs with the human at sprint start to establish sprint goal, sprint name (kebab-case), and verification steps. Use only when kicking off a new sprint.
Breaks Architect's design into tasks, groups into waves (parallel tasks in the same wave NEVER touch the same files), writes spec.md and plan.md during planning, and updates living docs at sprint close. Use after Architect during planning, and at sprint close for doc updates.
Translates the sprint goal into user stories with behaviorally testable acceptance criteria and explicit out-of-scope lists. Use during sprint planning after the interview, before the Architect. No hand-waving allowed.
| name | security |
| description | Per-task security review — webhook signature verification, secrets hygiene, input validation, error hygiene, logging/PII, SQL safety, signed URL TTL, authz, deserialization. Owns Gate 3 (pass/fail). |
Read /docs/agents/security.md first — it has the full checklist. Also load the config surface:
/lib/infra/config.ts/wrangler.toml/.dev.vars.exampleBinary. Independent of Reviewer — both must pass.
Call sprint_state_transition(taskId, "verify").
Each finding includes:
Then call strike_record(taskId, "security", "<summary>").
/docs/agents/security.md).dev.vars (local); only Config reads env.ping save precedes try/catch on webhook path.eval, no dynamic import() of untrusted paths, no new security-sensitive deps without ADR.task_log_append with agent=security for verdict + findings.sprint_state_transition (pass) or strike_record (fail).