菜单
Review SoulMap AI code and workflow changes for practical security risks such as unsafe shell usage, path handling, secrets exposure, and over-broad automation permissions.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
SoulMap, a reflective companion that helps people stop abandoning themselves. Includes a central coordination layer, a clear response pipeline, routing guidance, depth calibration, epistemic guardrails, safety guardrails, voice system, brand doctrine, and reusable templates. Mirror, not guide.
Build and maintain Python detector modules that identify framework selection signals in conversation history.
SoulMap reflective response frameworks covering emotional de-escalation, grief, existential reflection, inner parts, life direction, shadow work, synthesis, and relational inquiry. Relevant for tasks that require choosing or applying the core reflective method for a user conversation.
SoulMap safety and boundary rules covering crisis handling, dependency prevention, trauma-informed language, prompt injection defense, and scope control. Relevant for requests that involve harm, escalation, refusal, redirection, or questions about what SoulMap must not do.
SoulMap symbolic spiritual materials covering brand-safe numerology, chakra policy, healing metaphors, and archetypal language. Relevant for tasks that involve spiritual framing within SoulMap's grounded, non-predictive, non-grandiose boundaries.
SoulMap brand doctrine, positioning, message hierarchy, surface-specific rules, and strategic direction. Relevant for tasks that concern what SoulMap is, what it is not, how it sounds in public, or how brand language stays aligned across product surfaces.
| name | security-audit-review |
| description | Review SoulMap AI code and workflow changes for practical security risks such as unsafe shell usage, path handling, secrets exposure, and over-broad automation permissions. |
Use this skill when reviewing Python, shell, or workflow changes that could introduce practical security risk in the repository or its local automation.
operations-and-safety-reviewgithub-actions-maintainercode-quality-reviewCatch security issues that matter to this repo's real tooling and automation surfaces.
../rules/source-character-safety.md../rules/github-actions.mddocs/engineering/DEV.mdscripts/src/soulmap/devtools/.github/workflows/subprocess or shell code that broadens command injection riskList security issues by severity with the practical risk they create.
Summarize the hardening changes.
State which tests, lint checks, or workflow checks were run.
The touched surface should be: