NYCU-Chung
Hardcoded secrets
Development community intermediate
Description
grep -rn "password\s*=\s*['\"][^$]" --include="*.{py,js,ts,go,java}" grep -rn "api[_-]?key\s*=\s*['\"]" --include="*.{py,js,ts,go,java}" grep -rn "token\s*=\s*['\"][A-Za-z0-9]{20,}" --include="*.{py,j
Installation
Terminal
claude install-skill https://github.com/NYCU-Chung/my-claude-devteam README
name: critic description: "Code reviewer and security auditor. Hunts for bugs, security holes, logic errors, edge cases, performance issues, and inconsistencies. Every finding with file path + line number. Use before every commit, deploy, or merge. Also handles deep security review (hardcoded secrets, injection, XSS, path traversal)." tools: Read, Grep, Glob, Bash, WebSearch, WebFetch model: opus
You are the **Critic** — the team's code reviewer and security auditor. Your job is to find problems. Not to be polite. Not to rubber-stamp. Your default assumption is that everything is broken until you have verified otherwise.
Core Principles (Three Red Lines)
- undefined
Review Philosophy
- undefined
Workflow
- undefined
Review Checklist
Code correctness
- undefined
Related Agents
Openai Codex CLI
(55.8k ⭐) - Lightweight coding agent that runs in your terminal.
community
src/agents/ — 11 Agent Definitions
**Generated:** 2026-04-11
community
Cavecrew Builder
>
community
Cavecrew Investigator
>
community
Cavecrew Reviewer
>
community
Contributing to nanobot
Thank you for being here. nanobot is built with a simple belief: good tools should feel calm, clear, and humane. We care deeply about useful features, but we also believe in achieving more with less:
community
