跳到正文
cccskills
免费在 GitHub 公开

audit

Audit a repository or broad subsystem for security, correctness, and maintenance risks. Trace how inputs reach affected behavior, verify suspected defects, and report confirmed findings with severity, triggers, impact, and practical remedies.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Audit the repository or a broad subsystem for security, correctness, and maintainability risks. Use for audit requests or /audit; use review for a specific change and vuln-check for a security-only assessment.

ccch1mneyyy/dsh-TUI
查看安装方法

适用场景

  • Auditing risks across a repository
  • Checking state loss and resource limits in a TUI
  • Checking dependencies for known vulnerabilities
  • Organizing confirmed findings and remedies

包含的文件（1）

  • SKILL.md1.6 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Establish the audit scope, then trace the relevant runtime paths. For a findings-only request, leave code unchanged; carry out fixes when the user has requested them.

  1. Identify entry points, state owners, external inputs, and teardown paths within the requested scope.
  2. Follow inputs through validation and consumers. In this TUI, inspect applicable session projections, plugin capabilities, file access, terminal escape handling, and long-session resource bounds. Prioritize paths whose failure can lose state, cross a trust boundary, or leave the terminal unusable. Check dependencies and lockfiles for known vulnerabilities against advisory data.
  3. Confirm suspected defects against callers, existing guards, and focused regressions. Check exports, registries, and supported compatibility paths before declaring code dead. Explain a simplification in terms of current requirements and the behavior it preserves.
  4. Report confirmed findings by severity with location, trigger, impact, and a concrete remedy. Keep unverified leads separate. For a cross-layer failure, a short input → boundary → effect trace may be enough to explain it.
  5. State the areas examined, checks actually run, and material gaps. No findings means none found in that scope, not proof that the whole project is safe. An audit can finish without findings or a forced list of healthy areas.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护，适用 Google 的隐私权政策和服务条款。

同一仓库的技能

bug

免费

Turn a reported defect into a concise bug report or issue draft that someone else can reproduce or investigate. Organize symptoms, reproduction steps, expected and actual behavior, environment, and impact while separating evidence from unknowns.

中文简介正在准备中。当前显示英语简介。

  • Turning a defect description into a bug report
  • Organizing reproduction steps and expected behavior
  • Adding evidence from logs and relevant code
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

dsh-tui-guide

免费

Answer questions about dsh-tui using its bundled manuals. Find relevant guidance on installation, shortcuts, configuration, themes, session migration, and VS Code integration, then cite the source file and section for checking.

中文简介正在准备中。当前显示英语简介。

  • Looking up shortcuts and everyday operations
  • Checking configuration and theme settings
  • Finding guidance for migrating sessions
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

pr

免费

Prepare and publish a pull request with a linked issue, English commit and PR titles, and a Chinese description explaining the change, implementation, and verification. Update an existing branch PR and report its URL and CI status.

中文简介正在准备中。当前显示英语简介。

  • Publishing current code changes as a pull request
  • Rewriting a PR description to match the final changes
  • Adding diagrams and rendered terminal output to a PR
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

pr-comments

免费

Turn existing pull request review comments into prioritized next steps by checking them against the current code. Separate outstanding concerns, addressed feedback, and questions needing replies, then implement and validate fixes when requested.

中文简介正在准备中。当前显示英语简介。

  • Prioritizing pull request review feedback
  • Checking whether comments still apply to current code
  • Implementing and validating requested review fixes
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

practice

免费

Practice one programming concept through a small exercise matched to your goals, experience, and available time. Get feedback based on observable results, with hints or explained solutions and a harder variation when you are ready.

中文简介正在准备中。当前显示英语简介。

  • Practicing a programming concept in 10–15 minutes
  • Understanding display width for CJK characters and emoji
  • Tracing event order and cleanup
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

release-notes

免费

Draft release notes that explain what changes for users. Verify the release range, reconcile commits and reversals, and highlight breaking changes, migration steps, and relevant pull requests with evidence.

中文简介正在准备中。当前显示英语简介。

  • Drafting release notes for a specific version
  • Explaining breaking changes and migration steps
  • Summarizing user-visible changes across pull requests
ccch1mneyyy/dsh-TUI50022026年10月19日 更新

查看 ccch1mneyyy 的全部技能

报告此技能的问题