# Security Review

> 安全审查清单 (源自 ECC security-review)

- Skill: `wenjunduan/security-review-4` (Agent Skill)
- Install (CLI): `npx skillmds@latest add wenjunduan/security-review-4`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wenjunduan/security-review-4/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: wenjunduan (https://skillmd.com/u/wenjunduan)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wenjunduan/security-review-4

---

Path C+ 的 V 阶段:
1. 调用 security-auditor 子代理
2. 扫描项: 依赖漏洞、硬编码密钥、SQL注入、XSS、CSRF、CORS、文件上传
3. 输出风险等级 A-F
4. Critical/High 必须修复才能通过 cunzhi [VERIFIED]
5. 结果写入 `.ai_state/review.md`