security-quick-review
78Review Code Changes for Security Risks
Code changes can introduce security problems that routine reviews miss. This skill guides focused AI triage with evidence, realistic severity, and concrete fixes.
Create Clear Agent Session Handoffs
Long sessions and agent switches can lose decisions, test results, and unfinished work. This skill creates a concise HANDOFF.md with verified state and actionable next steps.
將此請求複製給你的智慧代理,其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "session-handoff" from https://skillstore.io/skills/agentkitco-session-handoff.md and its manifest at https://skillstore.io/api/skills/agentkitco-session-handoff/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫,並依安全政策請求必要確認。
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時,請使用這些連結。
正在使用「session-handoff」。 Prepare a handoff for an unfinished search filter change.
預期結果:
正在使用「session-handoff」。 Hand off a failing build when the full error output is unavailable.
預期結果:
All five static findings are false positives: Markdown backticks, read-only Git inspection, and verification placeholders explain the matches. No evidence found of prompt injection, data exfiltration, or malicious intent in SKILL.md. The workflow writes a handoff document and may run project tests, so repository trust and normal tool permissions still matter.
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據,不判斷該 Skill 是否安全。
https://skillstore.io/skills/agentkitco-session-handoff/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/agentkitco-session-handoff?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/agentkitco-session-handoff?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-session-handoff/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/agentkitco-session-handoff.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>agentkitco. (2026). session-handoff security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-session-handoff/audits/2@techreport{agentkitco-agentkitco-session-handoff-2026,
author = {agentkitco},
title = {session-handoff security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/agentkitco-session-handoff/audits/2},
note = {Author version 1.0}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "session-handoff security audit report (audit version 2)"
version: "1.0"
type: report
authors:
- name: "agentkitco"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/agentkitco-session-handoff/audits/2"
identifiers:
- type: other
value: "skillstore:agentkitco-session-handoff:audit:2"
description: "Skillstore immutable audit report identifier"
每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。
為何此變體排名第一
agentkitco-session-handoff
2026-10-22
Capture unfinished changes, test results, and next steps before ending a coding session.
Record reproduction commands, exact errors, rejected approaches, and unresolved questions for the next investigator.
Provide another agent with verified project state and ordered actions without requiring the full conversation.
Create HANDOFF.md for this session. Include the goal, current state, and next steps. Do not commit it.
Prepare a handoff after checking Git status, branch, and recent commits. Run quick tests if available and permitted. Mark anything unverified.
Create a debugging handoff with exact failing commands, errors, rejected approaches, and questions requiring my decision. Exclude secrets and personal data.
Write a handoff under about 80 lines for another agent. Separate verified facts from assumptions, identify unfinished files, and order actionable next steps. Do not commit.
作者
agentkitco授權
MIT
作者版本
v1.0
Skillstore 修訂
r2
版本提示
作者聲明的版本不符合 SemVer 規範。
引用
18efac79a818d7e997295839638fdd21906cfd1c
維護新鮮度
2026/10/22
使用量
5 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md
Review Code Changes for Security Risks
Code changes can introduce security problems that routine reviews miss. This skill guides focused AI triage with evidence, realistic severity, and concrete fixes.
Review Your Diff Before Opening a Pull Request
Local changes can hide bugs, security gaps, and missing tests before human review. This skill guides an evidence-based review with prioritized findings and explicit verification results.
Debug Bugs With Reproducible Evidence
Speculative fixes can hide causes and leave bugs unresolved. This skill guides assistants through reproduction, hypothesis testing, focused changes, and evidence-based verification.
Refactor Code with Tests and Small Changes
Code cleanup can introduce behavior changes that are difficult to detect. This skill guides small refactoring steps with baseline tests, dependency checks, and repeated verification.
Verify Tests Ran Before Reporting Completion
Passing claims can hide skipped tests, stale results, or checks that never exercised a change. This skill guides fresh verification and evidence-based completion reports.
Upgrade Dependencies With Focused Migration Checks
Dependency upgrades can introduce breaking changes and obscure existing failures. This skill guides focused migrations through release notes, baseline comparisons, minimal edits, and rollback reporting.
使用結構化文件規劃軟體專案
由 Dwsy
當需求、設計選擇和任務不清楚時,軟體專案往往會失敗。此技能會將專案想法轉化為適用於 Claude、Codex 和 Claude Code 工作流程的結構化規劃文件。
產生雙語 GitHub 發行版 README
由 ZhanlinCui
當團隊需要英文與中文 README 時,發行文件的撰寫會很耗時。此技能會根據儲存庫中繼資料與引導式設定產生結構化的雙語 README。
視覺化服務架構
由 AstraBit-CPT
當中繼資料分散在多個儲存庫中時,分散式服務很難理解。此技能會彙整目錄中繼資料,並建立圖表、表格與摘要,以供架構審查使用。
建立適合人類閱讀的 AI 文件
由 Brownbull
詳細的 AI 脈絡檔案通常太長,不便快速人工審閱。這項技能會將它們轉換為摘要、快速入門指南和 Mermaid 視覺指南。
建立有效的 AI 技能
由 notedit
團隊需要可重複使用的指引,以建立實用的 AI 技能,同時避免加入不必要的上下文。此技能提供一套結構化流程,用於規劃、撰寫、驗證與封裝技能。
建立 FlowGram 元件文件
由 bytedance
FlowGram material 元件需要一致的文件、可執行的 Story 範例、API 表格,以及雙語審查步驟。此 skill 為 Claude、Codex 和 Claude Code 提供結構化工作流程,用於產出這些資產。