leistungsbilanz-ts/.claude/skills/README.md
Grovy311 67476ea59b Add agent security skills for Codex and Claude Code
Same skills in .agents/skills (Codex) and .claude/skills (Claude Code):
codeguard, security-review, dependency-vetting, pre-release-gate,
authz-idor-audit, threat-model-light. Source: cj/claude-skills.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 09:40:33 +02:00

14 lines
847 B
Markdown

# Agent skills (test & security baseline)
The same skills live in `.agents/skills/` (Codex) and `.claude/skills/` (Claude Code).
Keep both folders identical when changing a skill: `diff -r .agents/skills .claude/skills`.
Source: Christian's skill repo `cj/claude-skills`; the skill texts are in German.
| Skill | Use it for |
|-------|-----------|
| `codeguard` | Secure-coding rules (Project CodeGuard) while writing or changing code |
| `security-review` | Reviewing a diff against the ASVS-light checklist, in a fresh context |
| `dependency-vetting` | Checking a new npm package before adding it (also `make vet-deps`) |
| `pre-release-gate` | Go / Go with conditions / No-Go before a deploy |
| `authz-idor-audit` | Systematic check of role and object permissions |
| `threat-model-light` | One-page threat model for the app or a feature |