跳到正文
cccskills
免费在 GitHub 公开

peephole

Show or change Peephole's enforcement mode (guided (default), audit, strict, hardened, off). Use when the user says /peephole, wants to see the current security mode, or asks to make enforcement stricter or looser.

中文简介正在准备中。当前显示原文说明。

实测评分 未实测

查看安装方法

包含的文件(1)

  • SKILL.md1.4 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Peephole mode control

Peephole is a plugin for coding agents: it steers the write and can ask or deny before a file is saved. Modes:

  • guided — Default. Findings are asks. Self-protection and org mandates still deny.
  • audit — warn + log only. Org-enforce CWEs and self-protection still deny.
  • strict — deny high-confidence CWE patterns, ask on lower-confidence ones.
  • hardened — deny-by-default; deny unverified package installs and uninspectable writes.
  • off — enforcement disabled.

To change mode

Raising enforcement (to strict or hardened) can be done from the shell:

sh "$CLAUDE_PLUGIN_ROOT/hooks/peephole.sh" mode strict

Lowering enforcement (to audit or off) is a human-only action — peephole denies a model-issued mode off/mode audit command as a self-protection measure. To lower it, the user types the whole message /peephole off (or audit), which the UserPromptSubmit hook applies directly. This prevents the assistant from waiving the gate on its own.

To see current mode and activity

Run /sec-audit (see the sec-audit skill), which prints the current mode, decision tally, and log-chain integrity.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

sec-audit

免费

Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally, sec-debt items needing approval, and tamper-evident log-chain status. Use when the user says /sec-audit or asks what Peephole has blocked or flagged.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

sec-debt

免费

Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when the user says /sec-debt, wants to knowingly accept a security finding, or asks what deferred security items exist.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

Review the current changes for the CWE classes Peephole enforces, as a checklist including the absence-of-guard classes regexes cannot catch. Use when the user says /sec-review or asks for a security review of recent code before committing.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

查看 akashsebastian333 的全部技能

报告此技能的问题