# Security Review

> Deprecated standalone security review skill. Use `code-review` when security concerns are in scope.

- Skill: `mrzhangguoguo/security-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add mrzhangguoguo/security-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mrzhangguoguo/security-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: mrzhangguoguo (https://skillmd.com/u/mrzhangguoguo)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/mrzhangguoguo/security-review

---


> Ported from oh-my-codex `security-review`. OMX runtime conventions (`$macro` invocation, `omx` CLI, `.omx/` state directory) are replaced with WorkBuddy idioms (Skill tool, Agent tool, task list, `.workbuddy/memory`).

# Security Review — deprecated

Hard-deprecated. Do not invoke or route this skill.

When security concerns are in scope, invoke the `code-review` skill (`skill: code-review`) and ask it to emphasize security/OWASP checks (injection, authn/authz, secrets, input validation, dependency CVEs). The `code-review` skill runs inside WorkBuddy with no `omx` binary and no `.omx/` directory.