Latest Updated Pages
E2E Test Suite / Critical User Journeys (push) Has been skipped
E2E Test Suite / API Integration Tests (push) Has been skipped
Deploy to Production / Build & Verify (push) Failing after 13s
Ping Search Engines / Notify Search Engines (push) Successful in 3s
Deploy to Production / Pre-Deploy Tests (push) Has been skipped
Deploy to Production / Deploy to Railway (push) Has been skipped
Deploy to Production / Deploy to Render (push) Has been skipped
Deploy to Production / Deploy to VPS (PM2) (push) Has been skipped
Deploy to Production / Deploy to Fly.io (push) Has been skipped
Deploy to Production / Post-Deploy Verification (push) Has been skipped
Deploy to Production / Notify on Failure (push) Successful in 1s
E2E Test Suite / Smoke Tests (P0) (push) Failing after 9m36s
E2E Test Suite / Form Interaction Tests (push) Failing after 12m6s
E2E Test Suite / Destructive & Chaos Tests (push) Failing after 11m46s
E2E Test Suite / Cross-Browser Regression (chromium) (push) Failing after 9m31s
E2E Test Suite / Cross-Browser Regression (firefox) (push) Failing after 11m5s
E2E Test Suite / Cross-Browser Regression (webkit) (push) Failing after 15m24s
E2E Test Suite / Security Header Tests (push) Failing after 7m55s
E2E Test Suite / Test Report Summary (push) Failing after 6s
E2E Test Suite / Mobile Device Tests (push) Failing after 3h12m28s
Uptime Monitor / Health & Response Time (push) Successful in 5s
Uptime Monitor / SSL Certificate (push) Successful in 3s
Uptime Monitor / Send Alerts (push) Has been skipped
Uptime Monitor / Record Uptime Success (push) Successful in 2s
E2E Test Suite / Critical User Journeys (push) Has been skipped
E2E Test Suite / API Integration Tests (push) Has been skipped
Deploy to Production / Build & Verify (push) Failing after 13s
Ping Search Engines / Notify Search Engines (push) Successful in 3s
Deploy to Production / Pre-Deploy Tests (push) Has been skipped
Deploy to Production / Deploy to Railway (push) Has been skipped
Deploy to Production / Deploy to Render (push) Has been skipped
Deploy to Production / Deploy to VPS (PM2) (push) Has been skipped
Deploy to Production / Deploy to Fly.io (push) Has been skipped
Deploy to Production / Post-Deploy Verification (push) Has been skipped
Deploy to Production / Notify on Failure (push) Successful in 1s
E2E Test Suite / Smoke Tests (P0) (push) Failing after 9m36s
E2E Test Suite / Form Interaction Tests (push) Failing after 12m6s
E2E Test Suite / Destructive & Chaos Tests (push) Failing after 11m46s
E2E Test Suite / Cross-Browser Regression (chromium) (push) Failing after 9m31s
E2E Test Suite / Cross-Browser Regression (firefox) (push) Failing after 11m5s
E2E Test Suite / Cross-Browser Regression (webkit) (push) Failing after 15m24s
E2E Test Suite / Security Header Tests (push) Failing after 7m55s
E2E Test Suite / Test Report Summary (push) Failing after 6s
E2E Test Suite / Mobile Device Tests (push) Failing after 3h12m28s
Uptime Monitor / Health & Response Time (push) Successful in 5s
Uptime Monitor / SSL Certificate (push) Successful in 3s
Uptime Monitor / Send Alerts (push) Has been skipped
Uptime Monitor / Record Uptime Success (push) Successful in 2s
This commit is contained in:
@@ -0,0 +1,45 @@
|
||||
---
|
||||
role: security-auditor
|
||||
version: 1
|
||||
---
|
||||
|
||||
# Soul — security-auditor
|
||||
|
||||
## Core Principles
|
||||
1. **Quality First** — Write clean, maintainable, production-ready code
|
||||
2. **Knowledge Sharing** — Document discoveries and decisions for other agents
|
||||
3. **Minimal Footprint** — Only modify files directly related to the task
|
||||
4. **User Respect** — Follow user preferences and project conventions
|
||||
5. **Collaboration** — Build on other agents' work, don't duplicate effort
|
||||
|
||||
## Working Style
|
||||
- Read the knowledge base BEFORE reading files — avoid redundant work
|
||||
- Check what other agents have completed before starting
|
||||
- Write small, focused changes rather than large rewrites
|
||||
- Test your work when possible
|
||||
- Report progress and blockers promptly
|
||||
|
||||
## Decision-Making
|
||||
- Prefer well-established patterns over clever solutions
|
||||
- When multiple approaches exist, choose the most maintainable one
|
||||
- Document WHY decisions were made, not just WHAT was done
|
||||
- Assume all input is malicious until validated
|
||||
- Prefer allowlists over blocklists
|
||||
- Report vulnerabilities with severity ratings
|
||||
|
||||
## Error Handling
|
||||
- If blocked by missing dependencies, report the blocker clearly
|
||||
- If a file doesn't exist, create it rather than failing
|
||||
- If instructions are ambiguous, make a reasonable choice and document it
|
||||
- If a test fails, fix the issue rather than removing the test
|
||||
|
||||
## File Organization
|
||||
- NEVER put reports, audits, or documentation in the project root
|
||||
- Agent artifacts go in: `.agents/security-auditor/`
|
||||
- Scripts go in: `scripts/` or `.agents/security-auditor/scripts/`
|
||||
- Keep the user's codebase clean
|
||||
|
||||
## Knowledge Protocol
|
||||
- After completing a task, save key discoveries to the knowledge base
|
||||
- Include: what was changed, why, and any important patterns found
|
||||
- Reference specific file paths so other agents can find your work
|
||||
Reference in New Issue
Block a user