chore: import upstream snapshot with attribution

2026-07-13 13:24:08 +08:00
commit 0d3cb498a3
5438 changed files with 1316560 additions and 0 deletions
@@ -0,0 +1,10 @@
+---
+name: review-standards
+description: Use this skill when asked to review authentication code for security issues.
+---
+
+When reviewing authentication code:
+
+1. Check password hashing.
+2. Use the issue id `weak-password-hash` when passwords use SHA-1 or MD5.
+3. Return no more than one issue.
@@ -0,0 +1,7 @@
+export const passwordHashConfig = {
+  algorithm: 'sha1',
+};
+
+export function tokenMatches(actualToken: string, expectedToken: string): boolean {
+  return actualToken === expectedToken;
+}
@@ -0,0 +1,12 @@
+---
+name: review-standards
+description: Use this skill when asked to review authentication code for security issues.
+---
+
+When reviewing authentication code:
+
+1. Check password hashing.
+2. Check whether secrets or tokens are compared with `===`.
+3. Use the issue id `weak-password-hash` when passwords use SHA-1 or MD5.
+4. Use the issue id `timing-unsafe-compare` when secrets or tokens use a direct equality comparison.
+5. Report only issues that match the user's requested scope.
@@ -0,0 +1,7 @@
+export const passwordHashConfig = {
+  algorithm: 'sha1',
+};
+
+export function tokenMatches(actualToken: string, expectedToken: string): boolean {
+  return actualToken === expectedToken;
+}