Show or change Peephole's enforcement mode (guided (default), audit, strict, hardened, off). Use when the user says /peephole, wants to see the current security mode, or asks to make enforcement stricter or looser.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
Peephole is a plugin for coding agents: it steers the write and can ask or deny before a file is saved. Modes:
enforce CWEs and self-protection still deny.Raising enforcement (to strict or hardened) can be done from the shell:
sh "$CLAUDE_PLUGIN_ROOT/hooks/peephole.sh" mode strict
Lowering enforcement (to audit or off) is a human-only action — peephole
denies a model-issued mode off/mode audit command as a self-protection
measure. To lower it, the user types the whole message /peephole off (or
audit), which the UserPromptSubmit hook applies directly. This prevents the
assistant from waiving the gate on its own.
Run /sec-audit (see the sec-audit skill), which prints the current mode, decision tally, and log-chain integrity.
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally, sec-debt items needing approval, and tamper-evident log-chain status. Use when the user says /sec-audit or asks what Peephole has blocked or flagged.
日本語の概要は準備中です。原文の説明を表示しています。
Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when the user says /sec-debt, wants to knowingly accept a security finding, or asks what deferred security items exist.
日本語の概要は準備中です。原文の説明を表示しています。
Review the current changes for the CWE classes Peephole enforces, as a checklist including the absence-of-guard classes regexes cannot catch. Use when the user says /sec-review or asks for a security review of recent code before committing.
日本語の概要は準備中です。原文の説明を表示しています。