df65350c35
- Add generate-skills script to download and bundle skills from external repositories. - Register code-review-security skill for vulnerability detection and integrate into bundled skill initialization.
20 lines
791 B
TypeScript
20 lines
791 B
TypeScript
import { registerBundledSkill } from '../../skills/bundledSkills.js'
|
|
import { BUNDLED_SKILLS } from './builtin.js'
|
|
|
|
export function registerCodeReviewSecuritySkill(): void {
|
|
const files = BUNDLED_SKILLS['security-review'] ?? {}
|
|
const skillMd = files['SKILL.md'] ?? ''
|
|
|
|
registerBundledSkill({
|
|
name: 'code-review-security',
|
|
description: 'Systematic code security audit — identifies vulnerabilities like SQL injection, XSS, command injection, SSRF, etc.',
|
|
whenToUse:
|
|
'Use when the user requests a code audit, security audit, or vulnerability scan; or mentions /code-review-security, /audit, or wants a security check before deployment',
|
|
userInvocable: true,
|
|
files,
|
|
async getPromptForCommand() {
|
|
return [{ type: 'text', text: skillMd }]
|
|
},
|
|
})
|
|
}
|