007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Repository-specific AGENTS.md authoring and maintenance workflow. Use when creating, refreshing, or expanding AGENTS.md coverage for a codebase, including deciding whether nested AGENTS.md files are needed for subsystems with distinct rules, workflows, or AI-sensitive constraints.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
ultrathink or the deepest available reasoning mode before deciding AGENTS.md boundaries for large or safety-critical repos.scripts/inventory_agent_scope.pyWhen this skill is invoked explicitly, treat $ARGUMENTS as the repo root or subtree that needs AGENTS.md coverage.
Use this skill to create or update AGENTS.md files that help AI coding agents navigate a repository safely, quickly, and consistently.
The output should be specific to the target codebase. Avoid generic “best practices” prose unless it is tied directly to the repo’s structure, build system, workflows, or risk areas.
AGENTS.md applies to the entire repository subtree beneath it.AGENTS.md applies only to the subtree rooted at its directory.AGENTS.md files override parent instructions when they conflict.This precedence model matters. Only add nested files when a subtree genuinely needs instructions that differ from or go beyond the parent.
Resolve the target repository.
$ARGUMENTS points to another repo root or subtree.Inventory the repository before writing anything.
scripts/inventory_agent_scope.py <repo-path> first.AGENTS.md files, top-level manifests, README/docs, CI config, and a representative sample of core code paths.Build a mental model of the codebase.
Decide the AGENTS.md coverage plan.
Create or update the root AGENTS.md.
AGENTS.md files when they exist.Create or update nested AGENTS.md files only where warranted.
Validate the result.
The root file should usually contain:
AGENTS.md files, if presentKeep it specific. “Run tests” is weak. “Run pnpm test and pnpm type-check” is useful.
A nested file is justified when the subtree has at least one of these:
Examples from your codebases:
components/blocks/* in @opensite/ui needs block-specific serialization, registry, and design-system rules.src/services/orchestration/* in octane needs workflow-step, memory, and side-effect boundaries.app/services/ai/* in Rails repos needs webhook, vector, and processor-specific rules.Do not create nested files for shallow folders that add no new information.
Before finishing, confirm:
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。