diff options
| author | Arpit Chakladar <arpitchakladar@gmail.com> | 2026-09-27 19:06:55 +0530 |
|---|---|---|
| committer | Arpit Chakladar <arpit@chakladar.me> | 2026-09-29 23:42:33 +0530 |
| commit | 1312572fa140367010978f20129543c71052c281 (patch) | |
| tree | 5acdde67d1512537e9a31f8ef5624b93ec81ae64 /modules/development/pi-coding-agent/skills/security-review/SKILL.md | |
| parent | 9097b97080051022f15e821701f85de5ac7da3d4 (diff) | |
| download | home-manager-config-1312572fa140367010978f20129543c71052c281.tar.gz home-manager-config-1312572fa140367010978f20129543c71052c281.zip | |
feat(development/pi-coding-agent): added instructions on using subagents
Diffstat (limited to 'modules/development/pi-coding-agent/skills/security-review/SKILL.md')
| -rw-r--r-- | modules/development/pi-coding-agent/skills/security-review/SKILL.md | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/modules/development/pi-coding-agent/skills/security-review/SKILL.md b/modules/development/pi-coding-agent/skills/security-review/SKILL.md index 0b2d307..3f534ab 100644 --- a/modules/development/pi-coding-agent/skills/security-review/SKILL.md +++ b/modules/development/pi-coding-agent/skills/security-review/SKILL.md @@ -7,6 +7,13 @@ description: "Look for secrets, injection, unsafe shell execution, auth/authz mi Look for secrets, injection, unsafe shell execution, auth/authz mistakes, dependency risks, path traversal, SSRF, insecure defaults, etc. +## Subagents +When you need to delegate sub‑tasks, use the `pi-subagents` skill. + +**Example:** For a security audit, run a **scout** to scan for injection vulnerabilities in the input validators, another **scout** to review authentication flows for authz mistakes, and a **reviewer** to check for path traversal and SSRF in file-handling code—all in parallel. + +*You may adapt the delegation pattern to fit the exact requirements of the codebase.* + ## Checklist ### Secrets & Credentials @@ -47,4 +54,4 @@ Look for secrets, injection, unsafe shell execution, auth/authz mistakes, depend ### Insecure Defaults - [ ] Secure defaults enabled - [ ] Debug endpoints disabled -- [ ] Proper CORS configuration
\ No newline at end of file +- [ ] Proper CORS configuration |