Plan and report authorized vulnerability assessments on owned systems. Prioritize evidence, severity, and remediations. Do not deliver exploit payloads.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
Use this skill only with explicit written authorization for a named scope (systems, environments, and time window). If authorization is missing, expired, or the request is for someone else's systems, stop.
This skill is defensive and owner-authorized. It does not authorize offensive cyber operations.
Ship exploit PoCs, weaponized payloads, or live attack scripts
Scan production without a documented freeze and rollback
Mark a finding closed without a failing-then-passing test when code changes
Do not produce exploit payloads, malware, or attack procedures.
Load this skill from /cc-security when the Task Card domain is security-vuln-assessment.
Example prompts:
Assess the checkout API in staging (ticket SEC-214). Report exploitable authz gaps as remediations, not exploits.Triage SAST results on src/auth and turn confirmed issues into failing tests plus patches./cc-security (CCEP command security)security (not this id)security-reviewerまだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Use when adding monitoring, metrics, logging, or tracing to Spring AI or LLM integration code. Covers token tracking, latency measurement, cost estimation, and prompt/response logging. Use when user mentions AI monitoring, token costs, or LLM observability.
日本語の概要は準備中です。原文の説明を表示しています。
Provides expert knowledge for building modern native Android apps using Kotlin, Jetpack Compose, Material Design 3, MVI architecture, Hilt dependency injection, and Media3/ExoPlayer.
日本語の概要は準備中です。原文の説明を表示しています。
Design, implement, review, and audit Android Jetpack Compose UI/UX for phone interfaces. Use when a request concerns concrete Compose layout, components, interaction, accessibility, or visual behavior. Do not activate for framework or dependency presence alone; non-UI Android work is excluded.
日本語の概要は準備中です。原文の説明を表示しています。
Provides expert knowledge for designing, implementing, and managing REST API versioning strategies with deprecation workflows.
日本語の概要は準備中です。原文の説明を表示しています。
Provides expert knowledge for building Astro 5+ sites with Islands Architecture, Content Collections, TypeScript, and performance-first rendering strategies.
日本語の概要は準備中です。原文の説明を表示しています。
Audits token storage mechanisms to prevent XSS-based JWT theft.
日本語の概要は準備中です。原文の説明を表示しています。