Audit and remediate dependency/package vulnerabilities across .NET backend, frontend (npm/pnpm/yarn), and Rust projects with severity-based quality gates. Use when the user asks for SCA checks, dependency hardening, or release security gates before build/package.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
.github/AGENTS.md, .github/copilot-instructions.md, and .github/instructions/repository-operating-model.instructions.md..github/instruction-routing.catalog.yml..github/instructions/security-vulnerabilities.instructions.md.github/instructions/ci-cd-devops.instructions.md (when pipeline/release gates are involved).github/instructions/dotnet-csharp.instructions.md (when .NET backend is in scope).github/instructions/frontend.instructions.md (when frontend is in scope).github/instructions/rust-testing.instructions.md (when Rust crates are in scope)$SecurityScriptsRoot = Join-Path $env:USERPROFILE '.codex\shared-scripts\security'
pwsh -File (Join-Path $SecurityScriptsRoot 'Install-SecurityAuditPrerequisites.ps1') -RepoRoot $PWD -FrontendPackageManager auto
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-PreBuildSecurityGate.ps1') -RepoRoot $PWD -InstallMissingPrerequisites -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-VulnerabilityAudit.ps1') -RepoRoot $PWD -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-FrontendPackageVulnerabilityAudit.ps1') -RepoRoot $PWD -ProjectPath src/WebApp -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-RustPackageVulnerabilityAudit.ps1') -RepoRoot $PWD -ProjectPath . -FailOnSeverities Critical,High
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Use for non-trivial feature, behavior, workflow, or architecture work before execution planning. Create or update a versioned spec under planning/specs/active with design intent, alternatives, risks, acceptance criteria, and planning readiness.
The English summary is being prepared. Showing the original description.
Use for non-trivial, design-bearing, or architecture-affecting work before execution planning. Creates or updates a versioned spec under planning/specs/active/ with design intent, alternatives, risks, and acceptance criteria.
The English summary is being prepared. Showing the original description.
Build a minimal context pack and recommend the correct specialist path for token-efficient execution. Use when the task is non-trivial, spans multiple domains, or should reduce token usage before implementation.
The English summary is being prepared. Showing the original description.
Assembles the minimal context pack for a given task. Use when the task spans multiple domains or the context set has obvious redundancy. Do not trim required working context by default.
The English summary is being prepared. Showing the original description.
Route tasks using this repository's static routing catalog and load only the minimal context pack.
The English summary is being prepared. Showing the original description.
Route tasks using the repository's static routing catalog and load only the minimal context pack. Use before execution when the task spans multiple domains or the correct instruction set is unclear.
The English summary is being prepared. Showing the original description.