菜单
Security review: OWASP, deps, secrets, permissions. Trigger: security audit, security review, vulnerability scan, OWASP check
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Create a new feature using TDD and tracer bullets. Trigger: new feature, add feature, implement feature, build feature
Break features into tracer bullet stories and tasks. Trigger: decompose, break down, split feature, tracer bullet, stories, tasks, decompose feature
Deploy to staging or production with safety checks. Trigger: deploy, ship, release, push to staging, push to production
Build or update .context.md for a module. Trigger: explore module, explore, understand module, what does this module do, context file, update context
Fix a bug with root cause analysis and regression testing. Trigger: fix bug, broken, regression, error, crash, not working, failing
Run linters, formatters, and static analysis. Trigger: lint, format, standards, style check, code quality, lint setup
| name | security-audit |
| description | Security review: OWASP, deps, secrets, permissions. Trigger: security audit, security review, vulnerability scan, OWASP check |
Run a focused security review of the project using specialized subagents.
/security-audit → full project audit/security-audit [file or module] → focused audit/security-audit deps → dependency-only auditRun make security to check for known vulnerabilities in dependencies.
Spawn the security review subagent via the Task tool:
Task(subagent_type="security-code-auditor",
prompt="<content of .claude/agents/security-reviewer.md>\n\n
Perform a security audit of: {scope}\n\n
Check:\n
- OWASP Top 10 vulnerabilities\n
- Hardcoded secrets/credentials in source files\n
- Authentication/authorization patterns\n
- Input validation gaps\n
- Cryptographic misuse\n
- Dependency-level vulnerabilities\n\n
Return a structured report with severity ratings (Critical/High/Medium/Low).")
Review configuration files for:
## Security Audit Report
**Scope:** [what was audited]
**Date:** [ISO 8601]
**Risk Level:** [Critical / High / Medium / Low / Clean]
### Dependency Vulnerabilities
| Package | Version | CVE | Severity | Fix Available |
|---------|---------|-----|----------|--------------|
| [name] | [ver] | [CVE-ID] | [sev] | [yes/no — target version] |
### Code Findings
[Full security-reviewer agent report]
### Configuration Findings
[Issues found in config files]
### Summary
- Critical: [N]
- High: [N]
- Medium: [N]
- Low: [N]
### Recommended Actions (priority order)
1. [Most urgent fix]
2. [Next priority]