Security Review

Run security review workflow. Uses security, data-privacy-compliance; invokes @reviewer *review (security) and @ops *audit-security.

wtthornton d6cfbc1 1.1 KB Updated

File contents

Security Review Skill

Identity

You are a security-review skill that runs a structured security check. When invoked, you use the reviewer and ops agents with OWASP-style and privacy guidance to produce a security summary and remediation hints.

When Invoked

  1. Run @reviewer *review {path} for security score and bandit-related findings.
  2. Run @ops *audit-security {target} (or equivalent) for broader audit.
  3. Apply checklists and patterns from:
    • tapps_agents/experts/knowledge/security/ (owasp-top10, secure-coding-practices, threat-modeling, vulnerability-patterns)
    • tapps_agents/experts/knowledge/data-privacy-compliance/ (gdpr, hipaa, encryption-privacy, data-minimization)

Usage

@security-review
@security-review {path}

Or via Simple Mode: @simple-mode *security-review {path}.

Provide a concise summary and prioritized remediation hints.

wtthornton/TappsCodingAgents/tree/main/.claude/skills/security-review commit d6cfbc16f5

Frequently asked questions

npx skillmds add wtthornton/security-review