Menu
Security review: OWASP, deps, secrets, permissions. Trigger: security audit, security review, vulnerability scan, OWASP check
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Create a new feature using TDD and tracer bullets. Trigger: new feature, add feature, implement feature, build feature
Break features into tracer bullet stories and tasks. Trigger: decompose, break down, split feature, tracer bullet, stories, tasks, decompose feature
Deploy to staging or production with safety checks. Trigger: deploy, ship, release, push to staging, push to production
Build or update .context.md for a module. Trigger: explore module, explore, understand module, what does this module do, context file, update context
Fix a bug with root cause analysis and regression testing. Trigger: fix bug, broken, regression, error, crash, not working, failing
Run linters, formatters, and static analysis. Trigger: lint, format, standards, style check, code quality, lint setup
| name | security-audit |
| description | Security review: OWASP, deps, secrets, permissions. Trigger: security audit, security review, vulnerability scan, OWASP check |
Run a focused security review of the project using specialized subagents.
/security-audit → full project audit/security-audit [file or module] → focused audit/security-audit deps → dependency-only auditRun make security to check for known vulnerabilities in dependencies.
Spawn the security review subagent via the Task tool:
Task(subagent_type="security-code-auditor",
prompt="<content of .claude/agents/security-reviewer.md>\n\n
Perform a security audit of: {scope}\n\n
Check:\n
- OWASP Top 10 vulnerabilities\n
- Hardcoded secrets/credentials in source files\n
- Authentication/authorization patterns\n
- Input validation gaps\n
- Cryptographic misuse\n
- Dependency-level vulnerabilities\n\n
Return a structured report with severity ratings (Critical/High/Medium/Low).")
Review configuration files for:
## Security Audit Report
**Scope:** [what was audited]
**Date:** [ISO 8601]
**Risk Level:** [Critical / High / Medium / Low / Clean]
### Dependency Vulnerabilities
| Package | Version | CVE | Severity | Fix Available |
|---------|---------|-----|----------|--------------|
| [name] | [ver] | [CVE-ID] | [sev] | [yes/no — target version] |
### Code Findings
[Full security-reviewer agent report]
### Configuration Findings
[Issues found in config files]
### Summary
- Critical: [N]
- High: [N]
- Medium: [N]
- Low: [N]
### Recommended Actions (priority order)
1. [Most urgent fix]
2. [Next priority]