360 Secure SkillHub
360 安全技能中心

Runtime Verifier

该 Skill 用于在真实运行的应用、服务器或 CLI 环境中验证代码变更:先制定验证计划,启动所需环境,执行运行时检查,按步骤报告通过/失败证据,并清理已启动的进程或会话。强调不能只依赖单元测试,应给出可观察的结果。

wimi321
wimi321
热度 31.66
最近更新 2026-05-11 17:39:39
分类:开发依赖:代码执行应用场景:调试排错 / 代码审查 / DevOps

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add runtime-verifier
Metadata
name
runtime_verifier
description
Use when a code change must be verified by actually running the app, endpoint, or CLI flow instead of relying only on unit tests.

Runtime Verifier

Use this skill to verify that a change behaves correctly in a running system.

Workflow

  1. Translate the request into a concrete verification plan.
  2. Start the needed app, server, or CLI environment.
  3. Execute the runtime checks exactly as planned.
  4. Report pass/fail per step with evidence.
  5. Clean up any processes or sessions you started.

Guardrails

  • Do not confuse unit test coverage with runtime verification.
  • Prefer observable outcomes over vague confidence statements.
  • Update the verifier instructions if the environment changed and the failure is instruction drift, not product breakage.

Example Requests

  • Actually run the app and prove this change works.
  • Verify this endpoint or CLI flow in a live environment.

Inputs

  • Verification target
  • Expected runtime behavior
  • Environment startup instructions

Outputs

  • Verification plan
  • Pass/fail evidence
  • Cleanup summary

Success Criteria

  • The behavior was exercised in a live runtime.
  • Evidence is explicit.
  • Started processes were cleaned up.

Non-Goals

  • Stopping at unit tests only
  • Vague confidence statements with no evidence

Source Provenance

Derived from src/skills/bundled/verify.ts.