security-audit

name	security-audit
description	Use when user explicitly requests "security review", "audit security", "check for vulnerabilities", or "OWASP check", or when code-review identifies auth/payment/PII code needing a security pass. NOT automatic — must be explicitly requested or offered by code-review. Applies to Java/Quarkus, TypeScript, and Python projects.

Security Audit

Reads project type, then loads the language-specific audit checklist.

Step 0 — Load universal principles

Load ~/.hortora/garden/approaches/security-audit.md before proceeding.

Step 1 — Detect project type

python3 ~/.claude/skills/project-init/ctx.py

Read PROJECT_TYPE from the output.

Extract: java | ts | python

Step 2 — Load language-specific checklist

Project type	File to read
java	~/.claude/skills/security-audit/java.md
ts	~/.claude/skills/security-audit/typescript.md
python	~/.claude/skills/security-audit/python.md

Read the file, then execute the audit workflow it describes.

Skill Chaining

Invoked by: [code-review] when auth/payment/PII code is identified; user explicit request

Does NOT invoke: other skills automatically — findings are reported only