安全审查清单 — T 阶段 (Path C+)
Scanned 9/5/2026
Install to Claude Code
Skills Directorynpx -y skills add WenJunDuan/Rlues --skill security-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Security Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/wenjunduan-security-review)More formats (shields.io, HTML) on the badges page.
---
name: security-review
description: 安全审查清单 — T 阶段 (Path C+)
context: main
---
## 触发
Path C+ 的 T 阶段。
## 工具
| 工具 | 调用方式 |
|:---|:---|
| security-guidance | Plugin, 自然语言: "安全审查当前变更" |
| security-auditor agent | 子代理 (background), Path C+ 自动启动 |
## 检查项 (VibeCoding 补充)
- [ ] 无硬编码密钥/Token/密码
- [ ] SQL 查询使用参数化 (无字符串拼接)
- [ ] 用户输入已做 XSS 防护
- [ ] API 端点有认证/授权检查
- [ ] 敏感数据不出现在日志中
- [ ] 依赖无已知漏洞 (`npm audit`)
## 输出
cunzhi [SECURITY_PASSED] 确认后写入 verified.md。
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
