ctxman 3.0.0

package/.ctxman/wizard-profiles/security-audit/.methodinclude

@@ -0,0 +1,60 @@
+# Security Audit Profile - Method Level Include Filters
+# Focus on security-critical functions
+
+# Authentication & Authorization
+auth*
+*Auth
+login*
+logout*
+verify*
+*Token
+*Session
+*Permission
+*Role
+authorize*
+authenticate*
+check*Access
+
+# Data validation and sanitization
+validate*
+sanitize*
+escape*
+clean*
+filter*
+*Validator
+
+# Input/Output handling
+parse*
+*Input
+*Output
+encode*
+decode*
+
+# Cryptography
+encrypt*
+decrypt*
+hash*
+*Hash
+sign*
+*Signature
+*Crypto
+
+# Database queries (SQL injection risks)
+query*
+execute*
+*Query
+*SQL
+*Database
+
+# File operations (path traversal risks)
+read*
+write*
+upload*
+download*
+*File
+*Path
+
+# Error handling (information disclosure)
+*Error
+*Exception
+handle*Error

package/.ctxman/wizard-profiles/security-audit/profile.json

@@ -0,0 +1,34 @@
+{
+  "id": "security-audit",
+  "name": "Security Audit",
+  "icon": "🔒",
+  "description": "Focus on security-critical code and potential vulnerabilities",
+  "tokenBudget": {
+    "small": "15K-30K",
+    "medium": "30K-60K",
+    "large": "60K-120K"
+  },
+  "includes": {
+    "files": ["Auth modules", "API endpoints", "Middleware", "Database code", "Security configs"],
+    "methods": ["Authentication", "Validation", "Cryptography", "Database queries", "File operations"]
+  },
+  "excludes": {
+    "files": ["Tests", "Documentation", "Build artifacts"],
+    "methods": ["Test methods", "Mock/stub helpers"]
+  },
+  "bestFor": [
+    "Pre-deployment security reviews",
+    "Vulnerability assessments",
+    "Compliance audits",
+    "Penetration testing preparation",
+    "Security-focused code reviews"
+  ],
+  "securityFocus": [
+    "SQL Injection",
+    "XSS",
+    "Authentication Issues",
+    "Path Traversal",
+    "Information Disclosure",
+    "Cryptography"
+  ]
+}