免费在 GitHub 公开

review-security

Review application and infrastructure changes for exploitable security risks by tracing assets, trust boundaries, attacker-controlled input, authorization, sensitive data, and dangerous sinks. Use for security reviews, threat-focused PR reviews, authentication or authorization changes, input handling, secrets, dependencies, and infrastructure permissions; do not use to exploit live systems or modify code unless separately requested.

中文简介正在准备中。当前显示原文说明。

Phelan164/codex-howto

查看安装方法

包含的文件（3）

SKILL.md2.3 KB
agents/openai.yaml232 B
references/threat-checklist.md2.4 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Review Security

Workflow

Establish the review target, intended behavior, and relevant threat model.
Identify assets, trust boundaries, actors, entry points, and sensitive operations.
Trace attacker-controlled data to security-relevant sinks.
Inspect authentication, authorization, tenant isolation, and privilege changes.
Evaluate realistic exploitability and existing controls.
Validate suspected findings safely with read-only analysis or sandboxed tests when authorized.
Return prioritized findings with evidence, impact, prerequisites, and remediation direction.

Guardrails

Work read-only by default.
Do not access production systems, real customer data, or private credentials.
Do not publish weaponized exploit details or active secrets.
Avoid checklist-only findings without a reachable attack path.
Distinguish a missing defense-in-depth measure from an exploitable vulnerability.
Treat dependency scanner output as leads requiring context.
Keep proof-of-concept activity scoped, reversible, and authorized.

Threat checklist

Read references/threat-checklist.md for changes involving identity, parsers, URLs, files, commands, serialization, secrets, data boundaries, CI, or cloud permissions.

Finding standard

Include:

severity and confidence;
affected asset and trust boundary;
attacker prerequisites;
source-to-sink or authorization path;
impact;
exact code location;
safe reproduction guidance when appropriate;
remediation and verification direction.

Acceptance criteria

Findings describe realistic attack paths.
Authorization and tenant boundaries are explicitly reviewed.
Sensitive data handling is traced through logs and storage.
False positives and assumptions are called out.
No live exploitation or unauthorized write occurred.
Residual risk and unreviewed surfaces are explicit.

评价

还没有评价。欢迎分享你的使用感受。

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

同一仓库的技能

build-backend

免费

Build or modify backend APIs, services, jobs, persistence, and integrations while preserving contracts, authorization, data integrity, and failure behavior. Use for server-side features, database changes, background processing, backend defects, and service refactors; do not use for frontend-only or infrastructure-only work.

中文简介正在准备中。当前显示原文说明。