跳到正文
cccskills
免费在 GitHub 公开

sec-security-vulnerability-engineer

Audit and remediate dependency/package vulnerabilities across .NET backend, frontend (npm/pnpm/yarn), and Rust projects with severity-based quality gates. Use when the user asks for SCA checks, dependency hardening, or release security gates.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(1)

  • SKILL.md1.5 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Security Vulnerability Engineer

Load context first

  1. .github/AGENTS.md
  2. .github/copilot-instructions.md
  3. .github/instructions/repository-operating-model.instructions.md

Instruction pack

  • .github/instructions/security-vulnerabilities.instructions.md
  • .github/instructions/ci-cd-devops.instructions.md (when pipeline/release gates are involved)
  • .github/instructions/dotnet-csharp.instructions.md (when .NET is in scope)
  • .github/instructions/frontend.instructions.md (when frontend is in scope)
  • .github/instructions/rust-testing.instructions.md (when Rust crates are in scope)

Claude-native execution

Run as a general-purpose agent within the Super Agent pipeline.

Execution workflow

  1. Identify impacted stacks: .NET backend, frontend, Rust.
  2. Run package vulnerability audits before any build/package step.
  3. Classify findings by severity and enforce fail thresholds.
  4. Apply minimal safe upgrades and rerun audits/tests.
  5. Report artifacts and residual risk explicitly.

Validation examples

pwsh -File ./scripts/validation/validate-security-baseline.ps1
pwsh -File ./scripts/validation/validate-release-provenance.ps1

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Use for non-trivial feature, behavior, workflow, or architecture work before execution planning. Create or update a versioned spec under planning/specs/active with design intent, alternatives, risks, acceptance criteria, and planning readiness.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

Use for non-trivial, design-bearing, or architecture-affecting work before execution planning. Creates or updates a versioned spec under planning/specs/active/ with design intent, alternatives, risks, and acceptance criteria.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

Build a minimal context pack and recommend the correct specialist path for token-efficient execution. Use when the task is non-trivial, spans multiple domains, or should reduce token usage before implementation.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

Assembles the minimal context pack for a given task. Use when the task spans multiple domains or the context set has obvious redundancy. Do not trim required working context by default.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

Route tasks using this repository's static routing catalog and load only the minimal context pack.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

Route tasks using the repository's static routing catalog and load only the minimal context pack. Use before execution when the task spans multiple domains or the correct instruction set is unclear.

中文简介正在准备中。当前显示原文说明。

ThiagoGuislotti/copilot-instructions22026年6月29日 更新

查看 ThiagoGuislotti 的全部技能

报告此技能的问题