菜单
OWASP-based code security audit for a domain or file. Use when the user asks to "security review", "security audit", "OWASP check", or wants to audit code security for a domain or file.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Inspect drift between code, shared workflow references, and Claude, Codex, or Antigravity harness assets after architecture or workflow changes.
This skill should be used when the user asks to "sync guidelines", "document inspection", "check skill updates", "update project-dna", "sync patterns", "verify code-document consistency", or after architecture changes to verify Skills/AGENTS.md/CLAUDE.md match the actual code.
Guide a feature from requirements interview through architecture analysis, security check, and task decomposition.
This skill should be used when the user asks to "plan feature", "design feature", or wants to plan and design a new feature before implementation.
Audit a domain or the full repository for architecture compliance using the shared architecture checklist and repository rules.
Review a pull request or local diff against the repository's shared Review Protocol (correctness, regression, stability, contract, architecture, security, governance).
| name | security-review |
| argument-hint | domain_name, file_path, or all |
| description | OWASP-based code security audit for a domain or file. Use when the user asks to "security review", "security audit", "OWASP check", or wants to audit code security for a domain or file. |
Target: $ARGUMENTS (domain name, file path, or "all")
self-review (security-sensitive surfaces: auth, tokens, sensitive fields, file upload, credentials)/sync-guidelines if drift; otherwise /review-pr)/security-review recursively, do not invoke /plan-feature from insideDrift Candidates, and whether Sync Required is true or false (Phase 2)Findings (open) + Coverage (OK/SKIP) + Verdict: N/A (audit-only scope) (Phase 3)Read docs/ai/shared/skills/security-review.md for detailed steps, and
docs/ai/shared/review-protocol.md for the shared
output contract (this skill applies the SEC dimension in depth).
Also refer to docs/ai/shared/security-checklist.md for the full checklist.
For cross-tool review prompts, use the shared procedure's
Cross-Tool Review Prompt Template section; do not duplicate the template here.