TorusGuard Init — Project Stack Discovery & Rule Activation
Objective
Auto-detect repository technology stack across 16+ languages and frameworks, provision the .torusguard/ workspace structure, activate tailored TG-* security rules into .torusguard/rules/active/, and generate SECURITY.md baseline policies.
Two Execution Modes
Mode A: Automated CLI Execution
Run the workspace initializer from your terminal:
# Initialize current repository
npx torusguard init
# Initialize specific directory
npx torusguard init ./my-app
# Force re-initialization (overwriting existing configuration)
npx torusguard init --force
# Explicitly specify stack (e.g. react, nextjs, django, fastapi, express)
npx torusguard init --stack express
Under the Hood:
- Runs
stack_detect.py to inspect package files (package.json, pyproject.toml, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, *.csproj).
- Detects backend frameworks, frontend libraries, ORMs (Prisma, Mongoose, SQLAlchemy, Django ORM), and authentication systems.
- Scaffolds
.torusguard/ directory tree: config/, rules/active/, runs/, scripts/, workflows/, templates/, schemas/, memory/, snapshots/.
- Copies tailored rule definitions into
.torusguard/rules/active/.
- Provisions
SECURITY.md with standard responsible disclosure contacts.
- Writes
.torusguard/config/torusguard.json.
- Displays 75-column terminal cards.
Mode B: In-Session AI Chat Agent Initialization
When initializing a workspace directly in AI chat:
- Detect Stack: Inspect root files (
package.json, requirements.txt, etc.) to determine languages and frameworks.
- Bootstrap Structure: Ensure
.torusguard/ structure exists. If missing, run python skills/torusguard/bootstrap.py --target ..
- Activate Rules: Populate
.torusguard/rules/active/ with applicable rule files from rules/.
- Provision Policy: Create
SECURITY.md if not already present.
- Write Configuration: Persist settings into
.torusguard/config/torusguard.json.
- Prompt Audit: Advise the user to run
npx torusguard audit or /torusguard audit.
Output Card Format
### 🛡️ TorusGuard Workspace Initialized Successfully
- **Primary Stack:** Node.js / React / Express
- **Active Rules:** 71 canonical security rules enabled in `.torusguard/rules/active/`
- **Configuration:** Written to `.torusguard/config/torusguard.json`
- **Security Policy:** Baseline `SECURITY.md` generated
- **Next Step:** Run `npx torusguard audit` or `/torusguard audit` to scan for flaws
1---2name: torusguard-init3description: Initialize TorusGuard workspace — detect project stack, activate tailored TG-* security rules, and generate SECURITY.md baseline via CLI or AI Agent.4---56# TorusGuard Init — Project Stack Discovery & Rule Activation78## Objective9Auto-detect repository technology stack across 16+ languages and frameworks, provision the `.torusguard/` workspace structure, activate tailored `TG-*` security rules into `.torusguard/rules/active/`, and generate `SECURITY.md` baseline policies.1011---1213## Two Execution Modes1415### Mode A: Automated CLI Execution16Run the workspace initializer from your terminal:17```bash18# Initialize current repository19npx torusguard init2021# Initialize specific directory22npx torusguard init ./my-app2324# Force re-initialization (overwriting existing configuration)25npx torusguard init --force2627# Explicitly specify stack (e.g. react, nextjs, django, fastapi, express)28npx torusguard init --stack express29```30**Under the Hood:**31- Runs `stack_detect.py` to inspect package files (`package.json`, `pyproject.toml`, `requirements.txt`, `go.mod`, `Cargo.toml`, `Gemfile`, `composer.json`, `*.csproj`).32- Detects backend frameworks, frontend libraries, ORMs (Prisma, Mongoose, SQLAlchemy, Django ORM), and authentication systems.33- Scaffolds `.torusguard/` directory tree: `config/`, `rules/active/`, `runs/`, `scripts/`, `workflows/`, `templates/`, `schemas/`, `memory/`, `snapshots/`.34- Copies tailored rule definitions into `.torusguard/rules/active/`.35- Provisions `SECURITY.md` with standard responsible disclosure contacts.36- Writes `.torusguard/config/torusguard.json`.37- Displays 75-column terminal cards.3839### Mode B: In-Session AI Chat Agent Initialization40When initializing a workspace directly in AI chat:411. **Detect Stack:** Inspect root files (`package.json`, `requirements.txt`, etc.) to determine languages and frameworks.422. **Bootstrap Structure:** Ensure `.torusguard/` structure exists. If missing, run `python skills/torusguard/bootstrap.py --target .`.433. **Activate Rules:** Populate `.torusguard/rules/active/` with applicable rule files from `rules/`.444. **Provision Policy:** Create `SECURITY.md` if not already present.455. **Write Configuration:** Persist settings into `.torusguard/config/torusguard.json`.466. **Prompt Audit:** Advise the user to run `npx torusguard audit` or `/torusguard audit`.4748---4950## Output Card Format51```markdown52### 🛡️ TorusGuard Workspace Initialized Successfully53- **Primary Stack:** Node.js / React / Express54- **Active Rules:** 71 canonical security rules enabled in `.torusguard/rules/active/`55- **Configuration:** Written to `.torusguard/config/torusguard.json`56- **Security Policy:** Baseline `SECURITY.md` generated57- **Next Step:** Run `npx torusguard audit` or `/torusguard audit` to scan for flaws58```
githubmofo