arbiterforge/codearbiter · plugins/ca-codex/routines/security-architecture/SKILL.md
security-architecture skillA
Optional, opt-in STRIDE threat pass for a sensitive feature — invoked deliberately via /threat-model, never forced on ordinary changes. Walks the change's attack surface and security boundaries (governed by <project-root>/.codearbiter/security-controls.md), surfaces threats and unmitigated gaps, and MAY dispatch security-reviewer or auth-crypto-reviewer. Not a routine gate; it can hard-STOP only on a genuinely critical unmitigated threat it surfaces.
Latest version
mdr add arbiterforge/codearbiter/security-architecture@git:20260830.00ec49fExact content
mdr add arbiterforge/codearbiter/security-architecture@sha256:75ea3857d39b0368Badge
[](https://markdownregistry.com/a/art_zkmqh76xxzdewqzf)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260830.00ec49f latest | 2026-08-30 | 00ec49f | 4,244 B | A | view · diff |
| git:20260712.eee3949 | 2026-07-12 | eee3949 | 4,215 B | A | view |
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4244 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
arbiterforge/codearbiter · 142 stars · license AGPL-3.0 · pushed 2026-09-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_zkmqh76xxzdewqzf GET https://markdownregistry.com/api/v1/resolve?ref=arbiterforge/codearbiter/security-architecture GET https://markdownregistry.com/api/v1/blob/75ea3857d39b036810df95e69f6f6c80dfa3e8a4b85b217ed663e6380d69b692