본문으로 건너뛰기
cccskills
무료GitHub에 공개

vuln-check

Review resolved dependency versions and relevant code for security vulnerabilities. Get findings with evidence, impact, and targeted remedies, distinguishing published dependency warnings from exploit paths demonstrated in the project.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

원문원문 설명 보기

Check resolved dependencies and relevant code paths for security vulnerabilities. Use for security checks or /vuln-check; use audit for a broader correctness and maintainability assessment.

ccch1mneyyy/dsh-TUI
설치 방법 보기

이럴 때 유용합니다

  • Check dependencies for known vulnerabilities
  • Trace untrusted input to sensitive operations
  • Locate potential secrets in committed files
  • Prioritize security fixes using evidence

포함된 파일(1)

  • SKILL.md1.8 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Assess the requested security surface with evidence. A check returns findings; implement remediation when the user has requested it.

  1. Read package.json and pnpm-lock.yaml for the affected dependency paths. Use current advisory data, such as pnpm audit, and record the resolved version, advisory, affected range, and verified fixed version where available. Distinguish a dependency advisory match from a demonstrated exploit path in this project.
  2. Trace untrusted inputs through guards to sensitive operations: shell execution, filesystem access, plugin capabilities, and terminal escape output. For paths, check containment and symlink behavior where relevant; normalization alone does not prevent traversal. Inspect actual validation and authorization before treating a suspicious API as a vulnerability. Scan committed repository files for potential secrets; report only the path, line, and secret type, never the value or a source excerpt.
  3. Report findings by severity with location, trigger, impact, evidence, and the smallest effective remedy. Separate confirmed issues from leads needing verification. Preserve the upstream peer/dev dependency contract when proposing upgrades.
  4. State the scope, sources checked, and gaps. If advisories are unavailable, report that the dependency check is incomplete; absence of findings is not a claim that the project is vulnerability-free.

Report potential secrets only by path, line, and type, never their value or a source excerpt. Do not run automatic dependency fixes as part of a check; for requested remediation, make targeted changes and validate the affected paths.

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

댓글

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

보내면 바로 공개됩니다. 이메일 주소나 전화번호 같은 개인 정보는 쓰지 마세요. URL은 2개까지입니다.

0 / 1,000자

이 양식은 reCAPTCHA로 보호되며 Google 개인정보처리방침 및 서비스 약관이 적용됩니다.

같은 저장소의 스킬

audit

무료

Audit a repository or broad subsystem for security, correctness, and maintenance risks. Trace how inputs reach affected behavior, verify suspected defects, and report confirmed findings with severity, triggers, impact, and practical remedies.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Auditing risks across a repository
  • Checking state loss and resource limits in a TUI
  • Checking dependencies for known vulnerabilities
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

bug

무료

Turn a reported defect into a concise bug report or issue draft that someone else can reproduce or investigate. Organize symptoms, reproduction steps, expected and actual behavior, environment, and impact while separating evidence from unknowns.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Turning a defect description into a bug report
  • Organizing reproduction steps and expected behavior
  • Adding evidence from logs and relevant code
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

dsh-tui-guide

무료

Answer questions about dsh-tui using its bundled manuals. Find relevant guidance on installation, shortcuts, configuration, themes, session migration, and VS Code integration, then cite the source file and section for checking.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Looking up shortcuts and everyday operations
  • Checking configuration and theme settings
  • Finding guidance for migrating sessions
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

pr

무료

Prepare and publish a pull request with a linked issue, English commit and PR titles, and a Chinese description explaining the change, implementation, and verification. Update an existing branch PR and report its URL and CI status.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Publishing current code changes as a pull request
  • Rewriting a PR description to match the final changes
  • Adding diagrams and rendered terminal output to a PR
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

pr-comments

무료

Turn existing pull request review comments into prioritized next steps by checking them against the current code. Separate outstanding concerns, addressed feedback, and questions needing replies, then implement and validate fixes when requested.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Prioritizing pull request review feedback
  • Checking whether comments still apply to current code
  • Implementing and validating requested review fixes
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

practice

무료

Practice one programming concept through a small exercise matched to your goals, experience, and available time. Get feedback based on observable results, with hints or explained solutions and a harder variation when you are ready.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Practicing a programming concept in 10–15 minutes
  • Understanding display width for CJK characters and emoji
  • Tracing event order and cleanup
ccch1mneyyy/dsh-TUI5.1천2026년 10월 20일 업데이트

ccch1mneyyy의 스킬 모두 보기

이 스킬의 문제 신고