Agent skill
security-review
安全审查。Path C+ 自动触发或显式调用。检查认证/授权、输入验证、密钥管理、依赖漏洞。
Install this agent skill to your Project
npx add-skill https://github.com/WenJunDuan/Rlues/tree/main/vibeCoding/old version/config-agent_v9.3/.claude/skills/security-review
SKILL.md
Security Review
检查项
- 认证/授权: 每个端点有权限检查?
- 输入验证: 外部输入已验证和消毒?
- 密钥管理: 无硬编码, 用环境变量
- 依赖:
npm audit/pip audit无高危 - 日志: 不记录密码/token/PII
- CORS/CSP: Web 接口配置正确?
结果追加 quality.md。
如已安装 ECC → npx ecc-agentshield scan 做深度扫描。
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
WenJunDuan/Rlues
agent-teams
Path D 并行编排 — 子代理分工 + Agent Teams 协作。需要 CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1
WenJunDuan/Rlues
tdd
Path 分级 TDD 策略
WenJunDuan/Rlues
context7
E 阶段按需拉取库文档 — 用 ctx7 获取准确 API 信息
WenJunDuan/Rlues
knowledge
跨会话经验管理 — 在 .ai_state 内沉淀和复用项目经验
WenJunDuan/Rlues
code-quality
Rev 阶段 Plugin 编排顺序
WenJunDuan/Rlues
verification
V 阶段 Path 分级验证清单
Didn't find tool you were looking for?