Run the security auditor agent standalone — OWASP-style review of recent changes or the whole codebase — and report findings by severity. Use when the user asks for a security check/audit outside the full /ship pipeline.
التثبيت
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Run the security auditor agent standalone — OWASP-style review of recent changes or the whole codebase — and report findings by severity. Use when the user asks for a security check/audit outside the full /ship pipeline.
/security-audit — Standalone Security Pass
Determine scope from $ARGUMENTS: a path, "full" (whole codebase), or default to
the working-tree diff / tickets in built/qa status if a workboard/ exists.
Spawn the security-auditor agent with the scope and project context
(stack, auth model, how the app is exposed).
If workboard tickets are in scope, findings go into each ticket's
Security Findings section; otherwise reported directly.
Present findings grouped by severity with file:line references and remediation
suggestions. Do not auto-fix — suggest /debug-findings to fix them.
