Menu
Review a diff for security, auth, permission, payment, data, secrets, prompt injection, and audit risks.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Update durable repo memory after planning, merge, rejection, blocker, or repeated agent mistake.
Convert an approved plan into PR-sized chunk contracts with scope, acceptance criteria, reviewer requirements, and human review focus.
Review a diff for architecture drift, wrong abstractions, boundary violations, coupling, and chunk-scope violations.
Review CI, lint, typecheck, test, coverage, workflow, and package-script changes for weakening or bypass behavior.
Fast-fail or split unreviewable agent work based on scope, size, file types, boundary count, missing evidence, or unclear intent.
Perform read-only repository discovery for an initiative. Use to map existing behavior, files, tests, risks, and unknowns before planning.
| name | security-review |
| description | Review a diff for security, auth, permission, payment, data, secrets, prompt injection, and audit risks. |
Review current changes against security boundaries.
For each finding:
Severity:
Location:
Problem:
Why it matters:
Suggested fix:
Blocks PR: yes/no
End with PASS / PASS WITH LOW RISKS / FAIL.