Menu
Run the security-audit DSL against a closed scope and emit findings.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | security-review |
| description | Run the security-audit DSL against a closed scope and emit findings. |
| argument-hint | --spec=<path> [--cwd=<dir>] |
| user-invocable | true |
| disable-model-invocation | false |
spec_path degrades to status=needs_user.cwd (defaults to the process working tree).ok when every check passes and failed when any check fails (failing check names surface as repair commands).When the active profile is security, this skill is a required gate for phase close.
spec_path points at a readable declarative audit spec.A missing or unreadable spec_path degrades to status=needs_user, which routes the operator to an AskUserQuestion prompt for the audit spec rather than running an empty check set.
Skill envelope with header.skill = "/security-review". Body carries scope_id, spec_path, checks_run, and the per-check findings.
Model-only playbook for adding a property-based test that pins a function's invariant.
Dispatch a claimed wave to a runtime per the V8 session-reuse ladder.
Fresh-context verification of a phase deliverable or wave outcome. Spawns a fresh auditor subagent that re-reads the diff against the success criteria.
Auto-chained research follow-up skill with recursion guard for residual unknowns.
Resolve the Co-Authored-By trailer policy for the active repo.
Compress the session conversation when context approaches the limit.