mirror of
https://github.com/catlog22/Claude-Code-Workflow.git
synced 2026-02-11 02:33:51 +08:00
重构 ccw cli 模板系统: - 新增 template-discovery.ts 模块,支持扁平化模板自动发现 - 添加 --rule <template> 选项,自动加载 protocol 和 template - 模板目录从嵌套结构 (prompts/category/file.txt) 迁移到扁平结构 (prompts/category-function.txt) - 更新所有 agent/command 文件,使用 $PROTO $TMPL 环境变量替代 $(cat ...) 模式 - 支持模糊匹配:--rule 02-review-architecture 可匹配 analysis-review-architecture.txt 其他更新: - Dashboard: 添加 Claude Manager 和 Issue Manager 页面 - Codex-lens: 增强 chain_search 和 clustering 模块 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
30 lines
1.2 KiB
Plaintext
30 lines
1.2 KiB
Plaintext
Analyze security implementation and potential vulnerabilities.
|
|
|
|
## CORE CHECKLIST ⚡
|
|
□ Identify all data entry points and external system interfaces
|
|
□ Provide file:line references for all potential vulnerabilities
|
|
□ Classify risks by severity and type (e.g., OWASP Top 10)
|
|
□ Apply RULES template requirements exactly as specified
|
|
|
|
## REQUIRED ANALYSIS
|
|
1. Identify authentication and authorization mechanisms
|
|
2. Assess input validation and sanitization practices
|
|
3. Review data encryption and secure storage methods
|
|
4. Evaluate API security and access control patterns
|
|
5. Document security risks and compliance considerations
|
|
|
|
## OUTPUT REQUIREMENTS
|
|
- Security vulnerability findings with file:line references
|
|
- Authentication/authorization pattern documentation
|
|
- Input validation examples and identified gaps
|
|
- Encryption usage patterns and recommendations
|
|
- Prioritized remediation plan based on risk level
|
|
|
|
## VERIFICATION CHECKLIST ✓
|
|
□ All CONTEXT files analyzed for security vulnerabilities
|
|
□ Every finding is backed by a code reference (file:line)
|
|
□ Both authentication and data handling are covered
|
|
□ Recommendations include clear, actionable remediation steps
|
|
|
|
Focus: Identifying security gaps and providing actionable remediation steps.
|