skills.rest
OneKeyHQ
OneKeyHQOFFICIAL
Explore all skills by this author →
Website𝕏@OneKeyHQGitHub

auditing-pre-release-security

Audit security and supply-chain risk between two git refs.

2.4k|527|Updated Nov 22, 2021
Search Tags:#git#workflow#ci/cd#security#dependencies#audit#release
One-click install
npx skills add https://github.com/OneKeyHQ/app-monorepo --skill auditing-pre-release-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auditing-pre-release-security
Source: https://github.com/OneKeyHQ/app-monorepo/tree/main/.claude/skills/auditing-pre-release-security
Command: npx skills add https://github.com/OneKeyHQ/app-monorepo --skill auditing-pre-release-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits security and supply-chain risk between two git refs, comparing code diffs, dependency deltas, lockfile determinism, and CI/CD configurations to surface issues before release. The output is a Chinese Markdown report, with a unique title and filename containing the refs to avoid overwrites.

Core Features & Use Cases

  • Diff-based security checks: Identify potential vulnerabilities in code changes.
  • Dependency delta analysis: Compare direct and transitive dependencies and lockfile determinism.
  • Node_modules behavior review: Inspect newly added packages for risky behavior.
  • CI/CD risk assessment: Scan workflows and build configs for insecure patterns.

Quick Start

Provide BASE_REF and TARGET_REF (e.g., v5.19.0 → release/v5.20.0), then run the audit to generate a Chinese Markdown report or a structured summary.