跳到正文
cccskills
免费在 GitHub 公开

sec-audit

Print Peephole's security audit report for this project — current mode, binary integrity, the CWE-mapped decision tally, sec-debt items needing approval, and tamper-evident log-chain status. Use when the user says /sec-audit or asks what Peephole has blocked or flagged.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(1)

  • SKILL.md1.5 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Peephole security audit

Run:

sh "$CLAUDE_PLUGIN_ROOT/hooks/peephole.sh" audit

Present the output to the user. It reports:

  • mode and binary integrity (a drift alarm means the binary or its embedded KB was tampered with — advise reinstalling).
  • decision tally — how many writes were denied / asked / allowed / retro-flagged / rewritten, broken down by CWE and by OWASP 2025 category.
  • born-secure (N2) — of the security-relevant hunks (heuristic-tagged), how many were clean at first write vs prevented at the gate vs landed insecure, with the born-secure rate. Instrumentation, not proof.
  • interruption rate — asks+denies per 20 write-gate decisions (the §7.4 FP budget: ≤ 1 unsolicited ask per 20 writes).
  • sec-debt — logged waiver requests and any UNAPPROVED markers in the tree (evasion risk), plus negative-test mandates that exhausted without compliance.
  • log chain — intact or BROKEN at line N, which surfaces casual truncation or tampering of the decision log. The log is the last 30 days.

If the log chain is broken, treat it as a signal that the audit log was altered and tell the user plainly.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

peephole

免费

Show or change Peephole's enforcement mode (guided (default), audit, strict, hardened, off). Use when the user says /peephole, wants to see the current security mode, or asks to make enforcement stricter or looser.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

sec-debt

免费

Explain and list Peephole sec-debt markers — deliberate, human-authorized security trade-offs recorded in code. Use when the user says /sec-debt, wants to knowingly accept a security finding, or asks what deferred security items exist.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

Review the current changes for the CWE classes Peephole enforces, as a checklist including the absence-of-guard classes regexes cannot catch. Use when the user says /sec-review or asks for a security review of recent code before committing.

中文简介正在准备中。当前显示原文说明。

akashsebastian333/peephole52026年8月30日 更新

查看 akashsebastian333 的全部技能

报告此技能的问题