Security audit
Security checks across malware telemetry and agentic risk
This looks like a workflow helper, but it can automatically create persistent project memory and permanent rules that affect future agent behavior without clear user review.
Install only if you want ShipGuard to manage a persistent project workflow directory. Before using it, review what it writes under `.dev-workflow/`, narrow when it activates, and require a diff or explicit approval before updates to permanent rules, lessons, cumulative test cases, or changelog entries.
--- ## Gate 5 — Lessons (Auto, no confirmation needed) Run automatically after CR closes. No user action required.
regression/
CR-YYYYMMDD-NN-regression.md
lessons/
hard-rules.md # Permanent rules, never expire
lessons.md # Historical lessons, dated entries
```写入： lessons/lessons.md → <dated entry> lessons/hard-rules.md → <if new permanent rule established> test-cases/all-test-cases.md → <append TCs from this CR> CHANGELOG.md → <append entry> ```
# ShipGuard — Hard Rules This file contains permanent rules that never expire. Loaded automatically at session start. Applied before handling any request. Format: [Date established] [CR that established it] Rule
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.