Adlc security checklist
Skill davidvictor/adlc-skills/skills/adlc/adlc-security-checklist
Agentic Development Lifecycle skills for real software work
npx -y skills add davidvictor/adlc-skills --skill adlc-security-checklistAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Run a read-only ADLC security gate for secrets, trust boundaries, and unsafe workflow changes.
SKILL.md
1.3 KB, as published. Nobody here has run it
ADLC Security Checklist
Use this when a plan, diff, extension, MCP configuration, release candidate, or workflow change needs a standalone security gate.
Process
- Resolve effective ADLC paths from
.adlc/config.yaml; useadlc resolve-configwhen the CLI is available. - Pin the target: plan, diff, extension directory, MCP template, agent install, or release candidate.
- Read architecture, rules, configured security references, and relevant source files.
- Inspect secrets, auth, authorization, prompt/data injection, path traversal, command execution, dependency/install behavior, and external integrations.
- Stay read-only. Route fixes to
adlc-fix,adlc-rules,adlc-plan, oradlc-implement. - Lead with exploitable or operationally meaningful findings.
Output
End with a final parseable adlc-gate-result fenced block:
{
"schema_version": 1,
"gate": "security",
"status": "pass|warn|fail",
"blocking": false,
"blockers": [],
"affected_files": [],
"suggested_next": {
"command": "adlc-fix|adlc-rules|adlc-plan|adlc-commit|null",
"reason": "Short reason."
}
}