Run the security auditor agent standalone — OWASP-style review of recent changes or the whole codebase — and report findings by severity. Use when the user asks for a security check/audit outside the full /ship pipeline.
Instalação
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Run the security auditor agent standalone — OWASP-style review of recent changes or the whole codebase — and report findings by severity. Use when the user asks for a security check/audit outside the full /ship pipeline.
/security-audit — Standalone Security Pass
Determine scope from $ARGUMENTS: a path, "full" (whole codebase), or default to
the working-tree diff / tickets in built/qa status if a workboard/ exists.
Spawn the security-auditor agent with the scope and project context
(stack, auth model, how the app is exposed).
If workboard tickets are in scope, findings go into each ticket's
Security Findings section; otherwise reported directly.
Present findings grouped by severity with file:line references and remediation
suggestions. Do not auto-fix — suggest /debug-findings to fix them.
