# Security > Dispatch the Security & Review Team on any security task. Auto-detects language, dependency manager, and existing security tooling. Use this skill IMMEDIATELY when the user asks for a security audit, dependency CVE check, secrets scan, threat model, license audit, code security review, or full security assessment. Project-agnostic. Use when this capability is needed. - Skill: `tomevault-io/security-6` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/security-6` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/security-6/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: AI & ML - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/security-6 --- # Security & Review Team dispatch 1. Read `~/.claude/agent-memory/security-lead/MEMORY.md`. 2. Read `~/.claude/agents/security/security-lead.md` — adopt as behavioral contract. 3. Create session workspace at `/.claude/teams/security//`. 4. Execute: Detection → Plan → Scan (scanner+secrets+reviewer+threat-modeler loop) → Evaluator → Retrospector. 5. Deliver security report with BLOCKER/ADVISORY/PASS verdicts and actionable remediation. --- > Source: [Akasxh/claude-forge](https://github.com/Akasxh/claude-forge) — distributed by [TomeVault](https://tomevault.io).