Menu
Security review, vulnerability scanning, and dependency audit for code changes.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Branch, commit, push, and open PRs with humanized messages, then monitor GitHub Actions CI. Per-project autonomy gating; blocks direct pushes to the default branch and pushes with a dirty tree. Never auto-merges.
Dispatch patterns for Claude Code as the coding engine. Default harness. Implementation dispatches go through dispatch_coder.py (writes the dispatch receipt the commit gate requires).
Testing strategy, TDD enforcement, spec compliance, and regression checks.
Write implementation plans: bite-sized tasks for coding engine dispatch.
Automated fix loop for failed Quality/Reviewer checks. Parses failures, builds escalating prompts, dispatches through the active harness up to 3 times.
Run independent, file-disjoint plan tasks concurrently, each isolated in its own git worktree + branch. Collects per-task results; never auto-merges.
| name | security |
| description | Security review, vulnerability scanning, and dependency audit for code changes. |
| version | 1.0.0 |
| author | Hermes Coder (adapted from Squad eecom/surgeon) |
| license | MIT |
| platforms | ["linux","macos","windows"] |
| metadata | {"hermes":{"tags":["security","vulnerability","audit","dependencies","secrets"],"related_skills":["quality","reviewer","architect"]}} |
Apply this lens when reviewing code for security concerns, auditing dependencies, or checking for secrets exposure.
Identity: Security engineer responsible for identifying vulnerabilities and enforcing secure coding practices.
Expertise:
Responsibilities:
When dispatching security review (see active harness skill for exact command syntax):
<files>. Check for: OWASP Top 10 issues, hardcoded secrets, dependency vulnerabilities, input validation gaps. Report findings with severity."