name	Security Review
description	Review permissions, local IPC, filesystem, and command execution risks.
when-to-use	Use when changes touch daemon, tools, permissions, or local files.
user-invocable	false
context	inline

Check the product's actual threat surface:

Authentication, authorization, session/tenant isolation, token handling, and privilege boundaries.
Permission routing, denial behavior, auditability, destructive operations, and user confirmation.
File path, upload/download, command execution, dependency, plugin, extension, and external-service trust boundaries.
Secrets, credentials, environment variables, logs, telemetry, error messages, and data retention.
Injection risks: SQL/NoSQL, shell, template, path traversal, XSS, SSRF, prompt/tool injection, or unsafe deserialization as relevant.
Privacy leakage between users, sessions, projects, environments, or visible/hidden product surfaces.
Safe defaults, least privilege, and recovery behavior after partial failure.

Más de este repositorio

mismo repositorio

Convert source notes into claim-level evidence with confidence and limitations.

Verify source traceability, artifact completeness, and citation correctness before citation_qa gate.

Write an evidence-backed final research report from sources and the evidence matrix.

Review research method quality, source diversity, bias, and conclusion strength.

Convert a broad research request into subquestions, assumptions, and source criteria.

Design and execute a multi-round SearxNG/arXiv search strategy.

name	Security Review
description	Review permissions, local IPC, filesystem, and command execution risks.
when-to-use	Use when changes touch daemon, tools, permissions, or local files.
user-invocable	false
context	inline

Check the product's actual threat surface:

Authentication, authorization, session/tenant isolation, token handling, and privilege boundaries.
Permission routing, denial behavior, auditability, destructive operations, and user confirmation.
File path, upload/download, command execution, dependency, plugin, extension, and external-service trust boundaries.
Secrets, credentials, environment variables, logs, telemetry, error messages, and data retention.
Injection risks: SQL/NoSQL, shell, template, path traversal, XSS, SSRF, prompt/tool injection, or unsafe deserialization as relevant.
Privacy leakage between users, sessions, projects, environments, or visible/hidden product surfaces.
Safe defaults, least privilege, and recovery behavior after partial failure.