Adlc security checklist

Skill davidvictor/adlc-skills/skills/adlc/adlc-security-checklist

Run a read-only ADLC security gate for secrets, trust boundaries, and unsafe workflow changes.From its SKILL.md

Install

npx -y skills add davidvictor/adlc-skills --skill adlc-security-checklist

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
runs commandsInstructs the agent to run 1 command, including `adlc resolve-config`.

SKILL.md

1.3 KB, 288 tokens by cl100k_base, as published. Nobody here has run it

ADLC Security Checklist

Use this when a plan, diff, extension, MCP configuration, release candidate, or workflow change needs a standalone security gate.

Process

Resolve effective ADLC paths from .adlc/config.yaml; use adlc resolve-config when the CLI is available.
Pin the target: plan, diff, extension directory, MCP template, agent install, or release candidate.
Read architecture, rules, configured security references, and relevant source files.
Inspect secrets, auth, authorization, prompt/data injection, path traversal, command execution, dependency/install behavior, and external integrations.
Stay read-only. Route fixes to adlc-fix, adlc-rules, adlc-plan, or adlc-implement.
Lead with exploitable or operationally meaningful findings.

Output

End with a final parseable adlc-gate-result fenced block:

{
  "schema_version": 1,
  "gate": "security",
  "status": "pass|warn|fail",
  "blocking": false,
  "blockers": [],
  "affected_files": [],
  "suggested_next": {
    "command": "adlc-fix|adlc-rules|adlc-plan|adlc-commit|null",
    "reason": "Short reason."
  }
}

What ships with it: 5 files

1.9 KB alongside SKILL.md, 1 of them executable

agents/

openai.yaml180 B

references/

scripts/

audit.shruns319 B