jappel/leistungsbilanz-ts
1
0
Fork 1
Code Issues 6 Pull requests Projects Releases Packages Wiki Activity Actions

Add agent security skills for Codex and Claude Code

Browse source 
Same skills in .agents/skills (Codex) and .claude/skills (Claude Code):
codeguard, security-review, dependency-vetting, pre-release-gate,
authz-idor-audit, threat-model-light. Source: cj/claude-skills.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Grovy311 2026-10-15 09:40:33 +02:00
parent 431f9ff059
commit 67476ea59b
68 changed files with 6600 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
.agents/skills/README.md Normal file
View file

@ -0,0 +1,14 @@
# Agent skills (test & security baseline)
The same skills live in `.agents/skills/` (Codex) and `.claude/skills/` (Claude Code).
Keep both folders identical when changing a skill: `diff -r .agents/skills .claude/skills`.
Source: Christian's skill repo `cj/claude-skills`; the skill texts are in German.
| Skill | Use it for |
|-------|-----------|
| `codeguard` | Secure-coding rules (Project CodeGuard) while writing or changing code |
| `security-review` | Reviewing a diff against the ASVS-light checklist, in a fresh context |
| `dependency-vetting` | Checking a new npm package before adding it (also `make vet-deps`) |
| `pre-release-gate` | Go / Go with conditions / No-Go before a deploy |
| `authz-idor-audit` | Systematic check of role and object permissions |
| `threat-model-light` | One-page threat model for the app or a feature |