“security-review”的搜索结果

Security-focused code review identifying high-confidence exploitable vulnerabilities with two-axis severity/confidence scoring, OWASP 2025 alignment, per-finding Haiku verification, and false positive filtering. Optional GitHub PR posting. Use when user runs /security-review, /review:security-review, requests a "security review", "security audit", "vulnerability scan", or mentions "find vulnerabilities", "check for exploits".

中文简介正在准备中。当前显示原文说明。

5つの専門エージェント（backend-reviewer, frontend-reviewer, test-reviewer, security-reviewer, ux-reviewer）がチームでコードレビューするスキル。 git diff ベースで変更ファイルを検出し、各専門家が並列でレビューして 統合レポート（Markdown）を docs/reviews/ に出力する。 Use when: コードレビューしたい、変更をレビュー、レビューチーム、 チームレビュー、実装をチェック、品質チェック。 Triggers: "レビュー", "review", "コードレビュー", "code review", "チームレビュー", "team review", "変更をチェック", "品質チェック"

中文简介正在准备中。当前显示原文说明。

Use when legacy prompts or older framework flows reference `security-reviewer` and you need the modern runtime to resolve that capability cleanly.

中文简介正在准备中。当前显示原文说明。

Use when performing security audits, vulnerability assessments, penetration testing, or when asked to find security issues. Use when encountering code that handles user input, executes commands, reads files, or makes network requests.

中文简介正在准备中。当前显示原文说明。

コード品質の最終確認。Skill: code-review (built-in) で correctness bug を検出 → main agent が findings を修正 → lint/ty 静的解析 → 条件付きで security-reviewer / critic を spawn (security 関連変更 or plan/requirements.md がある時のみ)。「品質チェックして」「品質ゲート通して」「レビューして」「コードを確認して」「PR 出す前にチェック」「セキュリティ大丈夫？」「コード見て」で発動。

中文简介正在准备中。当前显示原文说明。

Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.

中文简介正在准备中。当前显示原文说明。

社員が申請したソフトウェア・SaaS・クラウドサービスの社内利用可否を、企業のIT/セキュリティ統制の観点から調査・評価するスキル。「〇〇のセキュリティ評価をして」「〇〇は社内で使っても大丈夫？」「このSaaSのセキュリティチェックをして」「新しいツールの導入審査をして」「〇〇と△△どちらが安全？」のような依頼で必ず使うこと。「セキュリティ」という言葉がなくても、特定のツール・サービスの社内導入可否・利用申請・リスク判断が話題になったら使う。Web検索で一次情報（プライバシーポリシー、利用規約、セキュリティホワイトペーパー、第三者認証）を収集し、6分野18項目のチェックリストに基づく3段階リスク評価付きの日本語レポート（Markdownファイル）と、ワークフロー（稟議）システムの承認コメント欄に貼れる短文サマリーを生成する。

中文简介正在准备中。当前显示原文说明。

Uncorrelated Evaluator — 4軸ルーブリック専門エージェント（functionality-reviewer・code-reviewer・design-reviewer・originality-reviewer）と security-reviewer を5並列実行し、成果物を多面的に独立評価します。PASS / NEEDS WORK / BLOCKED 判定を返します。Self-leniency 防止のため、実装エージェントのコンテキストを引き継がない新規エージェントとして起動します。「レビューして」「評価して」「実装を確認して」などのリクエストで起動します。

中文简介正在准备中。当前显示原文说明。

为认证、支付和API的实现与审查提供安全检查项、实现示例及上线前清单，涵盖输入验证、访问权限、秘密信息管理、请求限流，以及日志和错误中的敏感信息泄露。

• 检查登录和访问权限
• 审查API输入与文件上传
• 检查秘密信息和敏感日志

Change an existing feature that works but needs different behavior. The skill updates tests to reflect the new requirements, adjusts the implementation, and coordinates review with approval checkpoints before committing the changes.

中文简介正在准备中。当前显示英语简介。

• Changing an existing alert threshold
• Adjusting a working feature to new requirements
• Updating tests before changing behavior

从设计或需求文档中规划可完整运行的小功能单元，依次完成初始框架搭建、生成与评估迭代、审查及审批，组装可运行的最小可行产品，并分别提交框架与各项功能。

• 根据设计文档构建可运行的MVP
• 规划端到端运行的小功能单元
• 搭建首个可运行功能的初始框架

将尚未实现的新功能从调研、规划推进到测试先行的开发、审查和提交。各阶段交由对应的ECC智能体负责，并在计划批准和提交前暂停确认。

• 添加产品尚未支持的功能
• 先写测试再实现新功能
• 审查身份验证功能的安全性

Plan an AI team around a goal, defining roles, deliverables, and a recorded unit budget. After approval, it creates team, run, and task records in RuFlo AI Team; it does not execute the work.

中文简介正在准备中。当前显示英语简介。

• Plan roles for a new AI team
• Split a large goal into tasks with clear owners
• Organize a research, release, or security review team

Review source code with Strix to trace data flow and authorization checks, then test suspected vulnerabilities in a running environment. Receive proven findings with exploit examples and code locations, while keeping unconfirmed observations clearly identified.

中文简介正在准备中。当前显示英语简介。

• Reviewing a repository for security vulnerabilities
• Checking authorization logic in a specific service
• Reviewing security risks introduced by a branch

Review pending code changes for newly introduced security vulnerabilities with clear exploitation paths. Focus on concrete, significant risks and filter likely false alarms, then report affected files, line numbers, severity, attack scenarios, and recommended fixes in Markdown.

中文简介正在准备中。当前显示英语简介。

• Review a PR for newly introduced security vulnerabilities
• Check authentication and authorization changes
• Trace user input for injection risks

Review concrete code for exploitable security defects, including missing access checks, unsafe input handling, and exposed secrets. Report verified issues with file locations, reachable attack paths, severity, and suggested fixes.

中文简介正在准备中。当前显示英语简介。

• Review a code change for exploitable vulnerabilities
• Check authentication and access controls
• Trace unsafe input handling and secret exposure

Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.

中文简介正在准备中。当前显示英语简介。

• Reviewing an MCP server before release
• Checking authentication and validation on a network-exposed server
• Auditing tool code for unsafe execution paths

Configure tools and skills for sub-agents before dispatching development tasks. Role presets cover implementation, planning, reviews, testing, and verification, with defined boundaries for what each agent should do and whether it may modify files.

中文简介正在准备中。当前显示英语简介。

• Setting tool permissions before spawning a sub-agent
• Separating implementation, planning, and review roles
• Configuring agents for review without file changes

Review code for security vulnerabilities using a checklist covering unsafe input, authentication, access permissions, secrets, and data exposure. Classify findings into four severity levels to distinguish exploitable flaws, issues needing investigation, and smaller improvements.

中文简介正在准备中。当前显示英语简介。

• Review SQL, shell commands, and HTML for unsafe input
• Check authentication and access permissions
• Find exposed credentials and sensitive log data

Review code changes for newly introduced security issues with a plausible attack path. Produce findings for the Warden security summary, including affected lines, severity, a minimal fix, and observable conditions for confirming the issue is resolved.

中文简介正在准备中。当前显示英语简介。

• Checking a PR for newly introduced vulnerabilities
• Reviewing CI changes that expose secrets or write access
• Inspecting Electron changes for unsafe permissions

Review code and infrastructure for vulnerabilities, insecure dependencies, and exposed credentials. Combine automated scans with manual review to produce audit reports that identify affected locations, rate severity, and prioritize practical fixes.

中文简介正在准备中。当前显示英语简介。

• Reviewing code for security vulnerabilities
• Checking dependencies and exposed credentials
• Auditing cloud and infrastructure security

Review code changes and files for bugs, security risks, performance problems, design issues, and test coverage. Receive a structured report with prioritized findings, concrete improvement examples, positive feedback, and an overall review verdict.

中文简介正在准备中。当前显示英语简介。

• Reviewing a pull request
• Auditing code quality and security
• Finding refactoring opportunities

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

中文简介正在准备中。当前显示原文说明。

Dedicated security-audit route for OWASP-style risks, secret leaks, auth flaws, injection, unsafe input handling, SSRF/XSS, and sensitive-data exposure. Use instead of code-reviewer when the prompt explicitly asks for security, vulnerability, threat, auth, or OWASP review.

中文简介正在准备中。当前显示原文说明。