five-agent-security-review
Use for five-agent-dev-team secret handling, workflow permissions, Docker safety, dependency audit, local binding, and supply-chain review.
- License 许可
- MIT
- 最近更新
- 2026-09-11
- Stars
- ★ 17
- Forks
- 0
01 前言 Front Matter
- name
- five-agent-security-review
- metadata
- { "short-description": "Security review for the five-agent dev team" }
- description
- Use for five-agent-dev-team secret handling, workflow permissions, Docker safety, dependency audit, local binding, and supply-chain review.
03 SKILL.md 正文
Five Agent Security Review
Check:
- least-privilege workflow permissions
- no secrets in code, config, logs, PR bodies, state, or docs
- no broad OAuth/GitHub scopes without a spec reason
- Docker compose output is not resolved into state or logs
- services bind to
127.0.0.1unless explicitly required npm audit fix --forceis never used- moderate advisories are handled by documented policy, not hidden
Evidence should be compact: command names, pass/fail, and redacted risk notes.
04 同仓库更多 Skills
zyte-api-automation
Automate Zyte API tasks via Rube MCP (Composio). Always search tools first for current schemas.
zylvie-automation
Automate Zylvie tasks via Rube MCP (Composio). Always search tools first for current schemas.
zoominfo-automation
Automate Zoominfo tasks via Rube MCP (Composio). Always search tools first for current schemas.
zoom-out
Tell the agent to zoom out and give broader context or a higher-level perspective. Use when you're unfamiliar with a section of code or need to understand how it fits into the bigger picture.
zoho-mail-automation
Automate Zoho Mail tasks via Rube MCP (Composio): email sending, folders, labels, and mailbox management. Always search tools first for current schemas.
zoho-invoice-automation
Automate Zoho Invoice tasks via Rube MCP (Composio): invoices, estimates, expenses, clients, and payment tracking. Always search tools first for current schemas.