From 7c2dc647216b66766a10585b4eff96414eee4c61 Mon Sep 17 00:00:00 2001 From: YeonGyu-Kim Date: Sat, 30 May 2026 19:18:19 +0900 Subject: [PATCH] fix(commands): add security-review alias --- .agents/AGENTS.md | 7 +++++-- .agents/command/security-review.md | 16 ++++++++++++++++ .opencode/AGENTS.md | 7 ++++--- .opencode/command/security-review.md | 16 ++++++++++++++++ script/package-layout.test.ts | 2 ++ 5 files changed, 43 insertions(+), 5 deletions(-) create mode 100644 .agents/command/security-review.md create mode 100644 .opencode/command/security-review.md diff --git a/.agents/AGENTS.md b/.agents/AGENTS.md index 06c215e10..d5f8f0bb6 100644 --- a/.agents/AGENTS.md +++ b/.agents/AGENTS.md @@ -4,7 +4,7 @@ ## OVERVIEW -Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 -> 10 skills; 5 commands). +Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 -> 10 skills; 6 commands). Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/). When both directories declare the same skill or command name, the higher-priority scope wins per the loader's deduplication rules. @@ -25,7 +25,7 @@ Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file:// The 5 "NEW" skills here are skill-format equivalents of slash commands that exist in BOTH `.opencode/command/` and `.agents/command/`. They allow the same instructions to be triggered either by an explicit `/command` invocation OR by skill auto-loading on matching prompts. -## COMMANDS (5 slash commands) +## COMMANDS (6 slash commands) Identical set to `.opencode/command/`: - `/get-unpublished-changes` @@ -33,6 +33,9 @@ Identical set to `.opencode/command/`: - `/publish` - `/remove-deadcode` - `/security-research` +- `/security-review` + +`/security-review` is an alias command that loads the `security-research` skill. ## OTHER CONTENTS diff --git a/.agents/command/security-review.md b/.agents/command/security-review.md new file mode 100644 index 000000000..607b3a600 --- /dev/null +++ b/.agents/command/security-review.md @@ -0,0 +1,16 @@ +--- +description: Alias for the Team Mode security-research audit +--- + + +Load and follow the `security-research` skill exactly. + +```text +skill(name="security-research") +``` + + + +$ARGUMENTS + + diff --git a/.opencode/AGENTS.md b/.opencode/AGENTS.md index 89c11df1d..9d08a2dc4 100644 --- a/.opencode/AGENTS.md +++ b/.opencode/AGENTS.md @@ -4,9 +4,9 @@ ## OVERVIEW -Project-scope OpenCode configuration: 5 skills and 5 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline. +Project-scope OpenCode configuration: 5 skills and 6 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline. -**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 5 commands). Both directories load during the transition; consumers should prefer `.agents/`. +**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 6 commands). Both directories load during the transition; consumers should prefer `.agents/`. ## SKILLS (5) @@ -20,7 +20,7 @@ Project-scope OpenCode configuration: 5 skills and 5 slash commands committed al Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `references/`, `assets/`). -## COMMANDS (5 slash commands) +## COMMANDS (6 slash commands) | Command | Purpose | |---------|---------| @@ -29,6 +29,7 @@ Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `refer | `/publish` | Publish via GitHub Actions workflow. Argument: ``. | | `/remove-deadcode` | Remove unused code with LSP-verified safety + atomic commits. | | `/security-research` | Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers. | +| `/security-review` | Alias for `/security-research`. | ## OTHER CONTENTS diff --git a/.opencode/command/security-review.md b/.opencode/command/security-review.md new file mode 100644 index 000000000..607b3a600 --- /dev/null +++ b/.opencode/command/security-review.md @@ -0,0 +1,16 @@ +--- +description: Alias for the Team Mode security-research audit +--- + + +Load and follow the `security-research` skill exactly. + +```text +skill(name="security-research") +``` + + + +$ARGUMENTS + + diff --git a/script/package-layout.test.ts b/script/package-layout.test.ts index 5f7c759f3..83f146488 100644 --- a/script/package-layout.test.ts +++ b/script/package-layout.test.ts @@ -124,7 +124,9 @@ describe("published package layout", () => { // given const expectedAssetPaths = collectExpectedAssetPaths() expect(expectedAssetPaths).toContain(".opencode/command/security-research.md") + expect(expectedAssetPaths).toContain(".opencode/command/security-review.md") expect(expectedAssetPaths).toContain(".agents/command/security-research.md") + expect(expectedAssetPaths).toContain(".agents/command/security-review.md") expect(expectedAssetPaths).toContain(".agents/skills/security-research/SKILL.md") // when