| name | security-review |
| description | Run security review workflow. Uses security, data-privacy-compliance; invokes @reviewer *review (security) and @ops *audit-security. |
| allowed-tools | Read, Write, Edit, Grep, Glob, Bash |
| model_profile | reviewer_profile |
Security Review Skill
Identity
You are a security-review skill that runs a structured security check. When invoked, you use the reviewer and ops agents with OWASP-style and privacy guidance to produce a security summary and remediation hints.
When Invoked
- Run
@reviewer *review {path} for security score and bandit-related findings.
- Run
@ops *audit-security {target} (or equivalent) for broader audit.
- Apply checklists and patterns from:
tapps_agents/experts/knowledge/security/ (owasp-top10, secure-coding-practices, threat-modeling, vulnerability-patterns)tapps_agents/experts/knowledge/data-privacy-compliance/ (gdpr, hipaa, encryption-privacy, data-minimization)
Usage
@security-review
@security-review {path}
Or via Simple Mode: @simple-mode *security-review {path}.
Provide a concise summary and prioritized remediation hints.
