AGENT SKILL
security-audit
暂无简介
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-06
- Stars
- ★ 4
- Forks
- 17
02 资源文件 20
- 参考文档bmad-skill-manifest.yaml12 B
- 参考文档checklist.md24.3 KB
- 参考文档instructions.md1.4 KB
- 参考文档steps-c/step-01-preflight-and-context.md7.7 KB
- 参考文档steps-c/step-01b-resume.md2.8 KB
- 参考文档steps-c/step-02-identify-targets.md6.1 KB
- 参考文档steps-c/step-03-generate-tests.md12.9 KB
- 参考文档steps-c/step-03a-subagent-api.md10.8 KB
- 参考文档steps-c/step-03b-subagent-backend.md7.3 KB
- 参考文档steps-c/step-03b-subagent-e2e.md6.3 KB
- 参考文档steps-c/step-03c-aggregate.md11.4 KB
- 参考文档steps-c/step-04-validate-and-summarize.md2.8 KB
- 参考文档steps-e/step-01-assess.md1.2 KB
- 参考文档steps-e/step-02-apply-edit.md1.1 KB
- 参考文档steps-v/step-01-validate.md1.4 KB
- 参考文档validation-report-20260127-095021.md2.0 KB
- 参考文档validation-report-20260127-102401.md3.6 KB
- 参考文档workflow-plan.md429 B
- 参考文档workflow.md1.1 KB
- 参考文档workflow.yaml1.8 KB
03 SKILL.md 正文
security-audit
Structured security audit: GitHub security surface (Dependabot/CodeQL/advisories) + three-pass code review (authz/CSRF/OAuth, XSS, SQLi/files) with verify-before-fix and dismissal-only-with-proof. Not general code-quality audit (code-audit), doc health (docs-audit), or process analysis (retrospective-analysis). Load on security review requests, before release/staging→current gates, or when triaging security alerts.
See: .skills/security-audit/README.md
