Навыки: Безопасность

cms reference tool

当任务复杂或需要特定专长时，主动召唤其他 NPC 协同工作。

Designing and implementing CNIL-compliant cookie consent banners for French and EU audiences. References the EUR 100M Go...

Constrained Application Protocol (RFC 7252): RESTful UDP messaging, confirmable messages, observe pattern, and DTLS secu...

Generate boilerplate `# implements:` annotation for a function based on the artefact ID, inserting it as the first line...

Authorized source-code security review and SAST workflows: Semgrep and CodeQL pattern hunting, dangerous API identificat...

Audit code for actual defects, including bugs, application security issues, error handling gaps, and correctness problem...

Security audit, code quality review, and tech debt assessment for full-stack codebases. Run after major phases, at build...

对指定代码路径检查正确性、权限、数据处理与实际缺陷

Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patterns, dangerous API hunt...

This skill audits uncommitted changes, branches or PRs for bugs, edge cases, SOLID/DRY/SRP, architecture, security, perf...

Perform comprehensive code audits on repositories or directories. Use when asked to audit code, review a codebase, analy...

Read-only bloat audit of any repo. jscpd duplication, knip or language dead-code tools with a spot-check, cloc size, fun...

Read-only repo health audit: Wasp Nest setup, agent readiness, CI, tests, lint, lockfiles, secrets, governance. Writes c...

Search for code patterns in decompiled output using Weggli semantic matching. Use when finding vulnerable code construct...

Deep code quality analysis: performance (Big-O, hot paths, resource management), security (injection, secrets, auth, inp...

Review code for correctness, security, and clarity — in priority order.

Review the actual diff defect-first with evidence: correctness, security, performance, compat, tests. Severities blocker...

Structured code review focusing on correctness, security, and maintainability. Correctness before style. Every reviewer...

Review a diff for correctness, edge cases, regressions and maintainability, with blocking findings separated from sugges...

Review code files for quality, patterns, and best practices. Auto-detects TypeScript or Python and applies the appropria...

Pull request review guidance for correctness, security, tests, performance, API contract drift, migrations, and error ha...

Multi-agent code review with parallel specialized reviewers, architecture validation, challenge validation, and durable...

When the user asks for a code review, shares code for feedback, or says "review this", "check my code", "what's wrong wi...

Review a PR for quality, security, and standards compliance. Invokes the Code Reviewer agent (Rex).

Reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions...

Review a diff or a plan's implementation for correctness, quality and plan adherence, bucketing findings by severity int...

Perform thorough code reviews on files or pull requests, checking for bugs, security vulnerabilities, performance issues...

Review code for correctness, quality, conventions, simplicity, security, and overall health. Use when asked for a genera...

Run a comprehensive code review

Automated code review assistance with AI-powered analysis, security scanning, performance analysis, and best practices e...

Two-stage code review: spec compliance first, then code quality. Use when reviewing code changes, conducting PR reviews,...

Review code changes for correctness, security, performance, and maintainability. Use for PR reviews,code audits, pre-mer...

Systematic code review with quality gates, security audit, and parallel checks. Use for structured feedback on pull requ...

Security review of C / C++ code — memory-safety and the classic unsafe-API sinks. Load when reviewing C/C++ source/PR, o...

Security review of .NET / C# code — dangerous sinks and ASP.NET pitfalls. Load when reviewing a C#/.NET codebase/PR, on...

Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and col...

Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and pro...

Security review of Go code — dangerous sinks and web-framework pitfalls. Load when reviewing a Go codebase/PR, on .go so...

Systematic manual source-code security review — how to find bugs by reading code. Load on "review this code/repo", a sou...

Conduct two-stage code review: Stage 1 verifies spec compliance (criterion-to-code mapping), Stage 2 evaluates security,...

Security review of Node.js / JavaScript code — dangerous sinks and Express/framework pitfalls. Load when reviewing a Nod...

Security review of PHP code — dangerous sinks and framework pitfalls (Laravel/Symfony/WordPress). Load when reviewing a...

Improve PR descriptions and review practice. Use for checklists, PR size, comment quality, or rubber-stamp diagnosis. Re...

Security review of Ruby code — dangerous sinks and Rails pitfalls. Load when reviewing a Ruby/Rails codebase/PR, on .rb...

Security review of Rust code — where a memory-safe language still has real bugs: `unsafe`, FFI, panics, and the usual in...

Security review of Solidity / EVM smart contracts — reentrancy, access control, arithmetic, and DeFi economic bugs. Load...

Automated code review covering quality, security, performance, and best practices across any language. Use when asked to...