heyongjun666/AICU-Graph

Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/

http://www.apache.org/licenses/

http://www.apache.org/licenses/LICENSE-2.0

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2019 The Big Shoulders Project Authors (https://github.com/xotypeco/big_shoulders)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2024 The Boldonse Project Authors (https://github.com/googlefonts/boldonse)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2022 The Bricolage Grotesque Project Authors (https://github.com/ateliertriay/bricolage)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2018 The Crimson Pro Project Authors (https://github.com/Fonthausen/CrimsonPro)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2020 The DM Mono Project Authors (https://www.github.com/googlefonts/dm-mono)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2024 The Geist Project Authors (https://github.com/vercel/geist-font.git)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2022 The Gloock Project Authors (https://github.com/duartp/gloock)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2022 The Instrument Sans Project Authors (https://github.com/Instrument/instrument-sans)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2022 The Instrument Serif Project Authors (https://github.com/Instrument/instrument-serif)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2019 The Jura Project Authors (https://github.com/ossobuffo/jura)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2012 The Libre Baskerville Project Authors (https://github.com/impallari/Libre-Baskerville) with Reserved Font Name Libre Baskerville.

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2011 The Lora Project Authors (https://github.com/cyrealtype/Lora-Cyrillic), with Reserved Font Name "Lora".

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2025 The National Park Project Authors (https://github.com/benhoepner/National-Park)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2021 The Outfit Project Authors (https://github.com/Outfitio/Outfit-Fonts)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2021 The Pixelify Sans Project Authors (https://github.com/eifetx/Pixelify-Sans)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2024 The Red Hat Project Authors (https://github.com/RedHatOfficial/RedHatFont)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2001 The Silkscreen Project Authors (https://github.com/googlefonts/silkscreen)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2016 The Smooch Sans Project Authors (https://github.com/googlefonts/smooch-sans)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2023 The Tektur Project Authors (https://www.github.com/hyvyys/Tektur)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2019 The Work Sans Project Authors (https://github.com/weiweihuanghuang/Work-Sans)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

Copyright 2023 The Young Serif Project Authors (https://github.com/noirblancrouge/YoungSerif)

This Font Software is licensed under the SIL Open Font License, Version 1.1. This license is copied below, and is also available with a FAQ at: https://openfontlicense.org

https://openfontlicense.org

1. **Failing test** at whatever seam reaches the bug — unit, integration, e2e. 2. **Curl / HTTP script** against a running dev server.

2. **Curl / HTTP script** against a running dev server.

Phase 1 is done when the loop is **tight** and **red-capable**: you can name **one command** — a script path, a test invocation, a curl — that you have **already run at least once** (paste the invocation and its output), and that is:

#!/usr/bin/env bash

step "Open the app at http://localhost:3000 and sign in."

Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/

http://www.apache.org/licenses/

<meta charset="utf-8" />     <title>Architecture review — {{repo name}}</title>     <script src="https://cdn.tailwindcss.com"></script>

<title>Architecture review — {{repo name}}</title>     <script src="https://cdn.tailwindcss.com"></script>     <script type="module">

<script src="https://cdn.tailwindcss.com"></script>

<script type="module">       import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs";       mermaid.initialize({ startOnLoad: true, theme: "neutral", securityLevel: "loose" });

import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs";

license: MIT metadata:   author: https://github.com/Jeffallan

metadata:   author: https://github.com/Jeffallan   company: https://synergetic.solutions

author: https://github.com/Jeffallan

company: https://synergetic.solutions

- **Authorization**: Verify horizontal and vertical privilege escalation paths are blocked; test with tokens belonging to different roles/users. - **Input handling**: Confirm SQL injection payloads (`' OR 1=1--`) are rejected; confirm XSS p

- **Headers/CORS**: Validate with a security scanner (e.g., `curl -I`, Mozilla Observatory) that security headers are present and CORS origin allowlist is correct.

[Credential-related source omitted]

Maintained by [@jeffallan](https://github.com/jeffallan), Principal Consultant at [Synergetic Solutions](https://synergetic.solutions)

[Documentation](https://jeffallan.github.io/claude-skills/skills/security/secure-code-guardian/)

[Credential-related source omitted]

exec(`convert ${userInput}`); // Vulnerable!

exec(`ls ${userInput}`);

[Credential-related source omitted]

app.use((req, res, next) => {   if (!req.secure) {     return res.redirect(`https://${req.hostname}${req.url}`);

if (!req.secure) {     return res.redirect(`https://${req.hostname}${req.url}`);   }

return res.redirect(`https://${req.hostname}${req.url}`);

// Strict CORS app.use(cors({   origin: ['https://example.com', 'https://app.example.com'],

app.use(cors({   origin: ['https://example.com', 'https://app.example.com'],   methods: ['GET', 'POST', 'PUT', 'DELETE'],

origin: ['https://example.com', 'https://app.example.com'],

app.use(cors({   origin: (origin, callback) => {     const allowedOrigins = ['https://example.com'];

origin: (origin, callback) => {     const allowedOrigins = ['https://example.com'];     if (!origin || allowedOrigins.includes(origin)) {

const allowedOrigins = ['https://example.com'];

styleSrc: ["'self'", "'unsafe-inline'"],     imgSrc: ["'self'", "data:", "https:"],     connectSrc: ["'self'", "https://api.example.com"],

imgSrc: ["'self'", "data:", "https:"],     connectSrc: ["'self'", "https://api.example.com"],     fontSrc: ["'self'"],

connectSrc: ["'self'", "https://api.example.com"],

// Client sends in header fetch('/api/action', {

fetch('/api/action', {

[Credential-related source omitted]

// GOOD: Each function is independently mockable const api = {   getUser: (id) => fetch(`/users/${id}`),

const api = {   getUser: (id) => fetch(`/users/${id}`),   getOrders: (userId) => fetch(`/users/${userId}/orders`),

getUser: (id) => fetch(`/users/${id}`),

getOrders: (userId) => fetch(`/users/${userId}/orders`),

createOrder: (data) => fetch('/orders', { method: 'POST', body: data }),

// BAD: Mocking requires conditional logic inside the mock const api = {   fetch: (endpoint, options) => fetch(endpoint, options),

const api = {   fetch: (endpoint, options) => fetch(endpoint, options), };

fetch: (endpoint, options) => fetch(endpoint, options),

Apache License                            Version 2.0, January 2004                         http://www.apache.org/licenses/

http://www.apache.org/licenses/

http://www.apache.org/licenses/LICENSE-2.0