| name | security-audit |
| description | Lazy-load only when this workflow is explicitly needed. Use for credentials, command execution, network exposure, logs, generated code, or Unity automation guardrails. Check auth, input validation, path traversal, secret redaction, destructive actions, auditability, and least privilege. |
| category | review |
| source | lux |
Security Audit
Use for credentials, command execution, network exposure, logs, generated code, or Unity automation guardrails. Check auth, input validation, path traversal, secret redaction, destructive actions, auditability, and least privilege.
Passive Loading Rule
Do not preload this skill during startup, hot reload, or background indexing. Read it only when the user request directly matches this workflow.
Minimal Procedure
- Confirm the target result and affected LUX subsystem.
- Read only the files or evidence needed for the decision.
- Apply the checklist above without expanding scope.
- Produce concise output with evidence, risks, and the next verified action.
Output
- Result or verdict.
- Evidence used.
- Risks or blockers.
- Verification performed or the smallest remaining check.
