本文へ移動
cccskills
無料GitHub で公開

sec-audit

Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally, sec-debt items needing approval, and tamper-evident log-chain status. Use when the user says /sec-audit or asks what Peephole has blocked or flagged.

akashsebastian333/peephole
インストール方法を見る

含まれるファイル（1）

  • SKILL.md1.5 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Peephole security audit

Run:

sh "$CLAUDE_PLUGIN_ROOT/hooks/peephole.sh" audit

Present the output to the user. It reports:

  • mode and binary integrity (a drift alarm means the binary or its embedded KB was tampered with — advise reinstalling).
  • decision tally — how many writes were denied / asked / allowed / retro-flagged / rewritten, broken down by CWE and by OWASP 2025 category.
  • born-secure (N2) — of the security-relevant hunks (heuristic-tagged), how many were clean at first write vs prevented at the gate vs landed insecure, with the born-secure rate. Instrumentation, not proof.
  • interruption rate — asks+denies per 20 write-gate decisions (the §7.4 FP budget: ≤ 1 unsolicited ask per 20 writes).
  • sec-debt — logged waiver requests and any UNAPPROVED markers in the tree (evasion risk), plus negative-test mandates that exhausted without compliance.
  • log chain — intact or BROKEN at line N, which surfaces casual truncation or tampering of the decision log. The log is the last 30 days.

If the log chain is broken, treat it as a signal that the audit log was altered and tell the user plainly.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

ログインしてレビューを書く

同じリポジトリのスキル

概要と使いどころ

peephole

無料

Show or change Peephole's enforcement mode (guided (default), audit, strict, hardened, off). Use when the user says /peephole, wants to see the current security mode, or asks to make enforcement stricter or looser.

日本語の概要は準備中です。原文の説明を表示しています。

akashsebastian333/peephole52026年8月30日 更新

sec-debt

無料

Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when the user says /sec-debt, wants to knowingly accept a security finding, or asks what deferred security items exist.

日本語の概要は準備中です。原文の説明を表示しています。

akashsebastian333/peephole52026年8月30日 更新

sec-review

無料

Review the current changes for the CWE classes Peephole enforces, as a checklist including the absence-of-guard classes regexes cannot catch. Use when the user says /sec-review or asks for a security review of recent code before committing.

日本語の概要は準備中です。原文の説明を表示しています。

akashsebastian333/peephole52026年8月30日 更新

akashsebastian333 のスキルをすべて見る

このスキルの問題を報告する