security auditof vulnerability , code security analysis, penetration test , improvement inthisbefore teamthis to countlower security audit pipeline.
Configure human-in-the-loop gating for AI agent review actions in Claude Code. Use when setting up a project where an agent may post PR reviews, comments, merges, or edit CI…
Use when reviewing a technical analysis, design document, or specification from a developer perspective - checking technical feasibility, architecture, integration points — from…
Use when reviewing a technical analysis, design document, or specification from a security perspective - checking attack vectors, trust boundaries, authentication, data i — from…
Complete code review of a backend MR/PR with 8 sequential audits (Clean Architecture, DDD, TypeScript Best Practices, SOLID, Testing, Code Quality, Security, Performance).
Review CakePHP changes for mass assignment, IDOR, CSRF, uploads, serialization, redirects, secrets, and SQL safety.
Multi-agent code review by delegating to (1) codex-cli with GPT-5.5 xhigh, (2) gemini-cli with Gemini 3.1 Pro, and (3) four Claude specialist subagents (security, performance,…
差分が「その差分自身を審査するレビュー基準・品質ゲート」を弱めていないかを diff-time で検出する。Check 1 レビュールールの削除・弱体化（.river/rules.md / .river/rules.d/*）、Check 2 実行時コンフィグの閾値・ゲート緩和（.river-review.{json,yaml,yml} の…
Review FriendsOfCake CRUD controllers/listeners for mass assignment, serialization, RelatedModels, and IDOR risks.
Comprehensive pre-release review pipeline. Runs /review-health, /review-arch, /review-security, /review-perf, /review-a11y, /review-test, /review-doc, and /review-release in…
Detect package managers and discover outdated or vulnerable dependencies. Returns structured findings without upgrading.
Use for security review of dependency updates — bumps, upgrades, or new dependencies.
Use when auditing dependency health — outdated packages, CVE triage with attack-vector weighting, deprecated/declining library detection (trend-watch).
Use when reviewing a change, a design, or a system's readiness — ask "if this gets attacked or exploited in prod, would we even know?" Review the audit trail, the…
Fuehrt den eigentlichen Reviewlauf ueber den Wuerfel durch — Anzahl Zellen = Spalten x Zeilen x Arbeitsblaetter.
Run all three endpoint reviewers (REST Builder, portability contract, security) in parallel on a named ResourceImpl. Pass the resource name, e.g. /review-endpoint ContentStructure.
Final QC gate for a rendered 9:16 video ad, run before it is published. One script checks what a machine can decide — exact 1080x1920 size, a hook that moves and speaks in the…
Review computational protein or gene function predictions and fill PredictionReview YAML files using the COR/CNN/LSP/UNC/PLI/NPI/REP biological-validity taxonomy.
The Contracts & Security review perspective for PostHog Review. Verifies that changed code is safe and maintains compatibility: API contracts and breaking changes, injection /…
The Logic & Correctness review perspective for PostHog Review. Verifies that changed code does what it is supposed to do: business logic, edge cases, data transformations, and…
The validation criteria for PostHog Review, the bar for deciding whether a flagged PR issue is worth keeping.
Sets the reviewer persona for all code review, security review, and /simplify agents. Default mood: strict. Persists for the session until changed.
Run an in-house P0-P3 security review on a Sui Move package. Use when the user wants a Move security review or self-audit.
Review a pull request for code quality and security issues without using subagents. Use when the user wants a lighter-weight PR review in a single skill.
Standard code review checklist for all reviewers. Load this when performing a peer review at Stage 5.
White-box security audit. Blue-teamer and lead red-teamer run in parallel isolation for an independent first pass — neither sees the other's output during reconnaissance.
Given a GitHub issue, review the issue for security implications. You'll make a determination if the claim in the issue is legitimate and should be addressed or will be a "won't…
Compatibility redirect for /review-security or requests for a security review of a GitHub PR or branch. Routes to github-delivery; not a standalone security review workflow.
Review and triage semgrep security scan results to identify true positive vulnerabilities. Use when analyzing semgrep output, triaging security findings, reviewing static analysis…
Review a Skia upstream merge PR in mono/skia. Produces a security-auditable report by diffing against the upstream branch, verifying generated P/Invoke bindings, checking source…
Fast code/plan review for quality, security, and tests. Use for quick reviews before deeper analysis.
Use when the user wants a review of currently staged git changes before committing. Triggers on phrases like "review staged", "посмотри что я застейджил", "review before commit",…
Comprehensive review orchestrator. Spawns all relevant review agents (architecture, code quality, security, infrastructure) in parallel against a PR, branch, or set of changes.
Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues,…
5-agent parallel review gate using agent teams. Spawns Goal Verification, QA Execution, Code Quality, Security Audit, and Context Mining teammates. ALL must pass.
Automated code review and security linting integration for CI/CD pipelines using reviewdog. Aggregates findings from multiple security and quality tools (SAST, linters,…
各レビュアーエージェント（backend, frontend, database, security, infra, req, basic-design, detailed-design）の共通設定、動作モード、出力形式、スコアリング基準を定義
Run a layered quality gate over a code change — code quality, security audit, and architecture consistency, in that order.
Reviews Claude configuration files for security, structure, and prompt engineering quality. Use when reviewing changes to CLAUDE.md files (project-level or .claude/), ski — from…
Reviews Claude configuration files for security, structure, and prompt engineering quality. Use when reviewing changes to CLAUDE.md files (project-level or .claude/), ski — from…
Code review covering security, quality, tests, implementation, documentation,
Security review methodology — attack-surface identification, OWASP Top 10 checks, additional vulnerability checks, and the CRITICAL/HIGH/MEDIUM/LOW severity classification ladder.
Verifica CVEs em package.json, lockfile e Dockerfiles e inspeciona scripts postinstall de novas dependências.
Checklist shift-left de segurança para React — XSS, tokens em storage, CSRF e atributo rel noopener — como parte do DoD do dev.
Academic findings and economic thresholds for revnets from CryptoEconLab research. Use when: (1) explaining cash-out vs loan decision thresholds, (2) discussing loan solvency…
Römisches Recht: Rezeption In Deutschland. Geführter Fachmodul mit Quellenlogik, Prüfroutine, Red-Team-Fragen und verwertbarem Output.
Draft a design proposal (RFC) with a fixed section list and a security review checklist, then lint a folder of RFCs for the status header, review questions with no answer, open…
Use when an RFP, RFI, RFQ, security questionnaire, vendor questionnaire, or proposal request arrives and the team needs a structured response — parsing multi-section…
· Administer RHEL/Fedora/CentOS/Rocky/Alma/Amazon Linux: dnf, yum, SELinux, firewalld, dracut. Triggers: 'rhel', 'fedora', 'centos stream', 'rocky', 'dnf', 'selinux'.
RHEL changes since training cutoff (latest: 10.1) — Valkey replaces Redis, Podman v5 with pasta networking, post-quantum crypto, ISC Kea DHCP, stricter TLS/FIPS policies.
Authoring and debugging scripts for Rhinoceros 3D (Rhino 8 and later). Use when asked to write RhinoScript (VBScript / .rvb / .vbs), RhinoPython, or RhinoCommon-based scripts;…
HWP/HWPX 문서의 배포 전/수신 후 보안 점검을 수행합니다. inspect hidden-text(조판 은닉)·injection(프롬프트 주입 신호)·unicode(화면-바이트 불일치) 3축 스윕, edit redact --dry-run(읽기 전용 PII 탐지) → redact/sanitize 적용 → 재스윕…
Use when building a .NET 9 service from RI's shared components (ExportKing, KdbxCredentials, OhSheet, Anthea) deployed as a TinyWeb CGI, or registering a URL on the dw portal page.
Use for questions about making an app, report, notebook, or script work once deployed, such as keeping a SQLite or DuckDB database or other files across deployments, which content…
Use for questions about configuring a self-hosted Ricochet server in ricochet-config.toml, such as where the file lives, overriding settings with environment variables, setting…
Decide whether an FFI-binding gem needs a Rigor sub-plugin at all (core `rigor-ffi` covers the literal-`attach_function` + thin-wrapper case), then author one if needed.
Monitor and manage Ring doorbells and security cameras. Query device status, review motion events, manage modes, and export event history.
Panduan pengembangan bahasa pemrograman RiQi — smart contract language yang dirancang security-first untuk blockchain Skylum, mencakup compiler, VM, static analyzer, dan…
Cari airdrop atau testnet crypto terbaru. Format plain text English, 1 project per pesan, pakai ✧ buat step dan ✷ buat kode. Tanpa emoji, warning, atau gambar.
Führt die Risikobewertung eines Datenschutzvorfalls anhand der EDSA-Leitlinie 9/2022 zu Beispielen für die Meldung von Datenschutzverletzungen durch.