[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6CNCGCTBMAWM2NPF5KAVFVK":3,"skill-same:01M6CNCGCTBMAWM2NPF5KAVFVK":70},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":27,"linkOnly":28,"markdownContent":29,"markdownBody":30,"frontMatter":31,"refName":34,"commitSha":35,"skillDirectory":36,"forksCount":37,"repositoryHtmlUrl":38,"repositoryHomepageUrl":6,"ownerHtmlUrl":39,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":40,"install":41,"resources":53},"01M6CNCGCTBMAWM2NPF5KAVFVK","review-supply-chain",null,"Review supply-chain and code-execution risks","yida29\u002Farchrip","yida29","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F26829774?v=4","01M6CNBNXVC8D2SWGB774Y97ZE","yida","01M6CNBP1TGZ21SGQ3ZY626QHH",1,"MIT","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-supply-chain\u002FSKILL.md",[],[19,20,21,22,23,24,25,26],"review","review supply chain","notes","code","git","supply-chain","execution","diff","2026-11-10 10:12:30",false,"---\nname: review-supply-chain\ndescription: Review supply-chain and code-execution risks\nuser-invocable: true\nargument-hint: \"[scope: git diff | path | notes]\"\n---\n\n# Supply-chain \u002F execution safety review\n\nReview the codebase for supply-chain risk and untrusted-code execution paths.\n\n## Focus areas\n- Where the tool **executes** external commands (npm, npx, git, shell)\n- Where it **downloads\u002Finstalls** dependencies at runtime\n- Template copying \u002F vendored code: how integrity\u002Forigin is verified\n- Lockfiles and reproducibility (`npm ci` vs `npm install`)\n- Symlink\u002Fpath traversal risks when executing within project directories\n\n## Output format\n1. **Attack surface inventory** (commands + cwd + trust boundary)\n2. **High-risk findings** (with file paths)\n3. **Minimal mitigations** (ordered)\n   - pin versions\u002Flockfile, avoid `npx`, run `npm run`, symlink rejection, integrity checks\n\n$ARGUMENTS\n","# Supply-chain \u002F execution safety review\n\nReview the codebase for supply-chain risk and untrusted-code execution paths.\n\n## Focus areas\n- Where the tool **executes** external commands (npm, npx, git, shell)\n- Where it **downloads\u002Finstalls** dependencies at runtime\n- Template copying \u002F vendored code: how integrity\u002Forigin is verified\n- Lockfiles and reproducibility (`npm ci` vs `npm install`)\n- Symlink\u002Fpath traversal risks when executing within project directories\n\n## Output format\n1. **Attack surface inventory** (commands + cwd + trust boundary)\n2. **High-risk findings** (with file paths)\n3. **Minimal mitigations** (ordered)\n   - pin versions\u002Flockfile, avoid `npx`, run `npm run`, symlink rejection, integrity checks\n\n$ARGUMENTS\n",{"name":5,"description":7,"argument-hint":32,"user-invocable":33},"[scope: git diff | path | notes]",true,"main","5a62325f7d5f614ee9ffbb6d5ab7db8fecb465b0","skills\u002Freview-supply-chain",0,"https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip","https:\u002F\u002Fgithub.com\u002Fyida29","2026-11-12 04:05:53",{"source":8,"skillName":5,"commands":42,"prompt":52,"zipAvailable":33},[43,46,49],{"tool":44,"command":45},"npx","npx skills add yida29\u002Farchrip --skill review-supply-chain",{"tool":47,"command":48},"bunx","bunx skills add yida29\u002Farchrip --skill review-supply-chain",{"tool":50,"command":51},"pnpm","pnpm dlx skills add yida29\u002Farchrip --skill review-supply-chain","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-supply-chain\u002FSKILL.md",[54,60,66],{"path":55,"resourceType":56,"resourceTypeDesc":57,"sizeBytes":58,"sourceHtmlUrl":59},"references\u002Fissue-taxonomy.md","REFERENCE","参考文档",3619,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FCoding\u002Fgstack-qa\u002Fqa\u002Freferences\u002Fissue-taxonomy.md",{"path":61,"resourceType":62,"resourceTypeDesc":63,"sizeBytes":64,"sourceHtmlUrl":65},"SKILL.md.tmpl","OTHER","其他",11422,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FCoding\u002Fgstack-qa\u002Fqa\u002FSKILL.md.tmpl",{"path":67,"resourceType":56,"resourceTypeDesc":57,"sizeBytes":68,"sourceHtmlUrl":69},"templates\u002Fqa-report-template.md",2979,"https:\u002F\u002Fgithub.com\u002Fendman100\u002Fskill-router-nexus\u002Fblob\u002Fmain\u002FCoding\u002Fgstack-qa\u002Fqa\u002Ftemplates\u002Fqa-report-template.md",[71,86,101,122,131,141],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":82,"publishedAt":27},"01M6CNCP1G0EWPEG4HMAQ9Z4AD","review-ux-diagnostics","Review UX and diagnostics (errors, hints, verbose mode)","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-ux-diagnostics\u002FSKILL.md",[77],{"categoryNo":78,"categoryName":79,"taxonomyType":80,"taxonomyTypeDesc":81},"01JBSEEDCAT000000000000032","设计师","PROFESSION","适用职业",[19,83,84,85,21,23,26],"review ux diagnostics","ux","diagnostics",{"skillNo":87,"name":88,"nameZh":6,"description":89,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":92,"publishedAt":27},"01M6CNCM7K3S2710FJP16G0SSE","review-typescript-strict","TypeScript Strict Modeガイドラインを適用してコードレビュー・修正を行う。","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-typescript-strict\u002FSKILL.md",[],[93,19,94,95,96,97,98,99,100],"review typescript strict","typescript","typescript strict","read","check","edit","grep","file",{"skillNo":102,"name":103,"nameZh":6,"description":104,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":105,"categories":106,"keywords":112,"publishedAt":27},"01M6CNCJAY371WT8PYMTQPJ4KW","review-test-strategy","Review test strategy and regression resistance","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-test-strategy\u002FSKILL.md",[107],{"categoryNo":108,"categoryName":109,"taxonomyType":110,"taxonomyTypeDesc":111},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",[113,114,115,116,19,117,118,119,120,121,21],"review test strategy","test strategy","strategy","test","package","command","repo","regression","flow",{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":128,"publishedAt":27},"01M6CNCE6C1XXP746XW9P7MV56","review-srp","Review codebase for SRP (Single Responsibility) and boundaries","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-srp\u002FSKILL.md",[],[129,19,26,23,130,21],"review srp","pr",{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":137,"publishedAt":27},"01M6CNCCGEFSJ6YCDQNTTZT81J","review-schema-first","Review schema as a single source of truth (Schema-first)","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-schema-first\u002FSKILL.md",[],[138,19,139,140,26,23,21],"review schema first","first","schema",{"skillNo":142,"name":143,"nameZh":6,"description":144,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":145,"categories":146,"keywords":147,"publishedAt":27},"01M6CNCB04W11VAG7RZE6QVRHX","review-error-handling","Review error handling consistency and debuggability","https:\u002F\u002Fgithub.com\u002Fyida29\u002Farchrip\u002Fblob\u002Fmain\u002Fskills\u002Freview-error-handling\u002FSKILL.md",[],[19,148,149,26,23,130,21],"error handling","review error handling"]