security-review

name	security-review
description	Review exploit paths, secret exposure, unsafe permissions, injection, authentication and authorization, supply-chain risk, and data leakage.

Security Review

Focus

• Exploit paths and trust-boundary violations.
• Secret exposure, unsafe permissions, and data leakage.
• Injection and authentication or authorization failures.
• Supply-chain and dependency risk introduced by the change.

Output Discipline

• Lead with prioritized findings and concrete evidence.
• Cite the affected file, symbol, or contract when available.
• Distinguish confirmed defects from risks or missing evidence.
• Do not edit or rewrite the change unless the user asks.

Safety

• Review only; do not run scanners, install tools, or broaden permissions.
• Do not upload source code or read or print secrets.
• Do not contact production systems or external services.