skills.rest
Shah-Aayush
Shah-AayushCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dlp-windows-specialist

Review PRs for IBM Guardium Workforce DLP Windows agent correctness and policy invariants.

Updated Aug 23, 2026
Search Tags:#code review#audit#compliance#policy#PR review#DLP Windows agent
One-click install
npx skills add https://github.com/Shah-Aayush/pr-reviewer --skill dlp-windows-specialist
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dlp-windows-specialist
Source: https://github.com/Shah-Aayush/pr-reviewer/tree/main/shared-skills/dlp-windows-specialist
Command: npx skills add https://github.com/Shah-Aayush/pr-reviewer --skill dlp-windows-specialist

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides specialized review axes for the IBM Guardium Workforce / DLP Windows agent, ensuring product-specific correctness, audit, and policy invariants in PRs.

Core Features & Use Cases

  • Audit Completeness: Ensures no silent drops of events and proper handling of suppression gates and deduplication windows.
  • Policy Decision Correctness: Validates the correctness of policy decisions and the Lua engine sandbox boundary.
  • Server-Coordinated Schema Evolution: Manages breaking schema changes and new endpoints.
  • Backward Compatibility: Ensures backward compatibility for installed agents, including config keys, renames, and defaults.
  • Concurrency Handling: Manages concurrency hazards in the Durable Activity Updater.
  • ETW Provider Lifecycle: Ensures proper registration and unregistration of ETW providers.
  • Service Lifecycle Hardness: Manages SCM stop timeouts, session change handler thread safety, crash-loop logic, and dwControlsAccepted changes.
  • IPC Security: Secures named pipes and shared-memory IPC with proper DACLs and message validation.
  • Privilege Transitions: Ensures proper impersonation and logon context handling.
  • Sensitive Data Leakage: Protects sensitive data in logs, including policy content, file paths, and activity payloads.
  • MSI Installer/VDPROJ Correctness: Validates upgrade codes, service install/uninstall sections, custom actions, and rollback paths.
  • ARM64 + MSVC Particulars: Handles ARM64-specific issues with __cpuid, pointer truncation, warnings-as-errors, and inline assembly.
  • What NOT to Flag: Outlines what should not be flagged, including general C++ style, test file changes, documentation-only changes, new shared-skills config additions, and performance speculation.

Quick Start

Activate the dlp-windows-specialist skill on any diff to the dlp-agent-windows / endpoint-dlp-windows codebase to ensure product-specific correctness and compliance.

Frequently Asked Questions about dlp-windows-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review PRs for DLP Windows agent compliance and audit invariants?▼

Review PRs for DLP Windows agent compliance by validating audit completeness, policy decision correctness, and backward compatibility for installed agents. This ensures no silent drops of events and proper handling of suppression gates and deduplication windows.

What is the best way to secure named pipes and shared-memory IPC in DLP agent code?▼

Securing named pipes and shared-memory IPC requires applying proper DACLs and validating messages. It also involves ensuring correct privilege transitions, impersonation, and logon context handling to prevent unauthorized access.

Does this review process handle ARM64-specific issues with MSVC and inline assembly?▼

Yes, the review process handles ARM64-specific issues including __cpuid, pointer truncation, warnings-as-errors, and inline assembly. It also validates MSI installer and VDPROJ correctness for upgrade codes and custom actions.

How do I manage concurrency hazards in the Durable Activity Updater during PR review?▼

Manage concurrency hazards in the Durable Activity Updater by checking thread safety in session change handlers and SCM stop timeouts. Review crash-loop logic and dwControlsAccepted changes to ensure service lifecycle hardness.

When should I not flag changes during a DLP Windows agent code review?▼

Do not flag general C++ style, test file changes, documentation-only updates, new shared-skills config additions, or performance speculation. Focus strictly on product-specific correctness, audit, and policy invariants.

Related Skills

Explore More Software Engineering Skills→
zscalerzscaler
44

zins-analyze-web-traffic

Query Zscaler Analytics to summarize web traffic by location, protocol, and threats.

Official
Intermediate
hung-phanhung-phan

schema-evolution

Analyze schema compatibility for Avro, Protobuf, and JSON Schema formats.

Community
Advanced
AminAlamAminAlam
26

Static Analysis for Medical Devices

Enforce MISRA C/C++ and CERT C/C++ compliance in medical device software.

Community
Intermediate
sylvancsylvanc
6

review

Review Verona compiler code changes against project guidelines and tests.

Community
Advanced