360 Secure SkillHub
360 安全技能中心

Runtime Verifier

该技能用于在运行环境验证代码变更,而非仅依赖单元测试。核心功能为:将请求转化为验证计划,启动应用/服务器/CLI环境执行检查,输出通/失败证据并清理资源。典型场景:需实际运行应用、接口或CLI流程确认变更有效性时。输入含验证目标、预期行为、环境启动指令;输出包括验证计划、结果证据、清理总结。

wimi321
wimi321
热度 31.61
最近更新 2026-05-11 17:39:39
分类:开发依赖:代码执行 / 内部调用大模型应用场景:调试排错 / DevOps / 代码审查

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add runtime-verifier
Metadata
name
runtime_verifier
description
Use when a code change must be verified by actually running the app, endpoint, or CLI flow instead of relying only on unit tests.

Runtime Verifier

Use this skill to verify that a change behaves correctly in a running system.

Workflow

  1. Translate the request into a concrete verification plan.
  2. Start the needed app, server, or CLI environment.
  3. Execute the runtime checks exactly as planned.
  4. Report pass/fail per step with evidence.
  5. Clean up any processes or sessions you started.

Guardrails

  • Do not confuse unit test coverage with runtime verification.
  • Prefer observable outcomes over vague confidence statements.
  • Update the verifier instructions if the environment changed and the failure is instruction drift, not product breakage.

Example Requests

  • Actually run the app and prove this change works.
  • Verify this endpoint or CLI flow in a live environment.

Inputs

  • Verification target
  • Expected runtime behavior
  • Environment startup instructions

Outputs

  • Verification plan
  • Pass/fail evidence
  • Cleanup summary

Success Criteria

  • The behavior was exercised in a live runtime.
  • Evidence is explicit.
  • Started processes were cleaned up.

Non-Goals

  • Stopping at unit tests only
  • Vague confidence statements with no evidence

Source Provenance

Derived from src/skills/bundled/verify.ts.