name	security-review
description	Review a domain, file, or the full repository for OWASP-oriented security issues using the shared security checklist.
metadata	{"short-description":"OWASP security audit"}

Security Review

Default Flow Position

Step: self-review (security-sensitive surfaces: auth, tokens, sensitive fields, file upload, credentials)
Routes after: completion gate (/sync-guidelines if drift; otherwise /review-pr)
Recursion guard: do not invoke /security-review recursively, do not invoke /plan-feature from inside

Procedure

Read AGENTS.md and docs/ai/shared/skills/security-review.md for the full procedure.
Read docs/ai/shared/security-checklist.md and docs/ai/shared/project-dna.md as the shared security rule sources.
Resolve the audit scope and run the feature-detection / reference-freshness preflight (Phase 0).
Audit the target against the 12 security checklist categories using the shared applicability rules (Phase 1).
Determine stale-reference drift, other Drift Candidates, and whether Sync Required is true or false (Phase 2).
Report using the protocol output contract: Scope, Effect Answer, Sources Loaded, Findings (open only), Coverage (OK/SKIP), Drift Candidates, Verdict: N/A (audit-only scope), Next Actions, Completion State, Sync Required (Phase 3). Effect Answer is mandatory — see docs/ai/shared/review-protocol.md §3 for the contract and Guard H context.

For cross-tool review prompts, use the Cross-Tool Review Prompt Template section in docs/ai/shared/skills/security-review.md; do not duplicate it here.

Más de este repositorio

mismo repositorio

sync-guidelines

nrjdalal/awesome-templates

Inspect drift between code, shared workflow references, and Claude, Codex, or Antigravity harness assets after architecture or workflow changes.

2026-07-1427

sync-guidelines

nrjdalal/awesome-templates

This skill should be used when the user asks to "sync guidelines", "document inspection", "check skill updates", "update project-dna", "sync patterns", "verify code-document consistency", or after architecture changes to verify Skills/AGENTS.md/CLAUDE.md match the actual code.

2026-07-1427

plan-feature

nrjdalal/awesome-templates

Guide a feature from requirements interview through architecture analysis, security check, and task decomposition.

2026-07-0927

plan-feature

nrjdalal/awesome-templates

This skill should be used when the user asks to "plan feature", "design feature", or wants to plan and design a new feature before implementation.

2026-07-0927

review-architecture

nrjdalal/awesome-templates

Audit a domain or the full repository for architecture compliance using the shared architecture checklist and repository rules.

2026-07-0427

review-pr

nrjdalal/awesome-templates

Review a pull request or local diff against the repository's shared Review Protocol (correctness, regression, stability, contract, architecture, security, governance).

2026-07-0427

name	security-review
description	Review a domain, file, or the full repository for OWASP-oriented security issues using the shared security checklist.
metadata	{"short-description":"OWASP security audit"}

Security Review

Default Flow Position

Step: self-review (security-sensitive surfaces: auth, tokens, sensitive fields, file upload, credentials)
Routes after: completion gate (/sync-guidelines if drift; otherwise /review-pr)
Recursion guard: do not invoke /security-review recursively, do not invoke /plan-feature from inside

Procedure

Read AGENTS.md and docs/ai/shared/skills/security-review.md for the full procedure.
Read docs/ai/shared/security-checklist.md and docs/ai/shared/project-dna.md as the shared security rule sources.
Resolve the audit scope and run the feature-detection / reference-freshness preflight (Phase 0).
Audit the target against the 12 security checklist categories using the shared applicability rules (Phase 1).
Determine stale-reference drift, other Drift Candidates, and whether Sync Required is true or false (Phase 2).
Report using the protocol output contract: Scope, Effect Answer, Sources Loaded, Findings (open only), Coverage (OK/SKIP), Drift Candidates, Verdict: N/A (audit-only scope), Next Actions, Completion State, Sync Required (Phase 3). Effect Answer is mandatory — see docs/ai/shared/review-protocol.md §3 for the contract and Guard H context.

For cross-tool review prompts, use the Cross-Tool Review Prompt Template section in docs/ai/shared/skills/security-review.md; do not duplicate it here.