paladin

Paladin's security context dispatcher. Use when no specific Paladin skill is requested, when the user asks for a security review but the mode is unclear, or when Codex should inspect git state and route to code review, PR review, broad security review, repository audit, setup, or vulnerability mitigation.

Review changed code for high-confidence security vulnerabilities. Use for uncommitted local changes, staged changes, branch diffs, pasted diffs, or code security review before a PR when the task is focused on the diff rather than a broad repository audit.

Orchestrate security review for pull requests and PR diffs. Use for GitHub PR security review, inline PR comments, previous review-thread follow-up, and final PR security decisions; delegate core changed-code analysis to paladin-code-review.

Produce backlog-style repository security audits and weekly security metrics. Use for security backlog creation, recently merged PR sweeps, weekly reporting, management metrics, recurring pattern review, and prioritized audit items; use paladin-security-review for broader one-off repo sweeps or current advisory checks.

Run a broad defensive security review of a local repository, including changed-code review, repo sweep, misuse-case analysis, dependency and advisory checks, public zero-day claim evaluation, and known-exploited vulnerability review. Use for security sweeps, broad audits, current vulnerability checks, or requests to check whether a repo is exposed.

Turn a known vulnerability, CVE, CWE, dependency alert, scanner result, audit finding, or PR security finding into concrete mitigation steps and regression tests. Use when the user asks how to fix, remediate, patch, reduce risk, or validate a security issue.

Configure Paladin for a repository by creating or updating PALADIN.md. Use when the user asks to set up Paladin, initialize Paladin config, configure review actions, choose One Horizon/Linear/Jira/email/custom destinations, or prepare a repo for Paladin security review.