AGENT SKILL

strict-toolchain-audit

Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors

License 许可
MIT
所属仓库
jmagly/aiwg
最近更新
2026-11-14
Stars
★ 229
Forks
36

01 前言 Front Matter

name
strict-toolchain-audit
errors
[ { "no-supported-language": "no supported language/build signal detected" } ]
ensures
[ { "report": "strictness gaps per language and remediation commands" }, { "exit-code": "non-zero when --fail-on-missing is set and required strictness is absent" } ]
requires
[ { "project-files": "build files or CI workflows for at least one supported language" } ]
namespace
aiwg
platforms
[ "all" ]
invariants
[ "gradual-adoption baselines are allowed only when new warnings still fail", "sanitizer jobs do not count as replacement for strict compiler/linter gates" ]
commandHint
{ "model": "haiku", "category": "security", "modelRole": "efficiency", "modelTier": "economy", "allowedTools": "Read, Bash, Grep", "argumentHint": "[--language c|cpp|rust|go|python|typescript|auto] [--fail-on-missing] [--format text|json]", "orchestration": false }
description
Check build and CI configuration for warning-as-error, strict typechecking, and language-specific compiler/linter floors

03 SKILL.md 正文

Strict Toolchain Audit

Inspect build and CI configuration for the strict-toolchain rule. This maps curl Practice 13 into a reusable AIWG security-engineering audit.

Checks

  • C/C++: compiler flags include -Wall, -Wextra, -Werror, -pedantic; recommended hardening flags are reported when absent.
  • Rust: cargo clippy -- -D warnings or equivalent CI gate.
  • Go: go vet ./... and staticcheck ./... fail CI.
  • Python: ruff check and mypy strictness are configured.
  • TypeScript: strict: true and noUncheckedIndexedAccess: true.

Gradual Adoption

Legacy projects may keep a baseline, but the audit must confirm that new warnings fail the build. A baseline without a ratchet is reported as a finding.

References

  • agentic/code/frameworks/security-engineering/rules/strict-toolchain.md
  • agentic/code/frameworks/security-engineering/skills/sanitizer-in-ci/SKILL.md

04 同仓库更多 Skills