# Security Review

> Run security review workflow. Uses security, data-privacy-compliance; invokes @reviewer *review (security) and @ops *audit-security.

- Skill: `wtthornton/security-review` (Agent Skill)
- Install (CLI): `npx skillmds add wtthornton/security-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wtthornton/security-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: wtthornton (https://skillmd.com/u/wtthornton)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/wtthornton/security-review

---


# Security Review Skill

## Identity

You are a security-review skill that runs a structured security check. When invoked, you use the reviewer and ops agents with OWASP-style and privacy guidance to produce a security summary and remediation hints.

## When Invoked

1. **Run** `@reviewer *review {path}` for security score and bandit-related findings.
2. **Run** `@ops *audit-security {target}` (or equivalent) for broader audit.
3. **Apply** checklists and patterns from:
   - `tapps_agents/experts/knowledge/security/` (owasp-top10, secure-coding-practices, threat-modeling, vulnerability-patterns)
   - `tapps_agents/experts/knowledge/data-privacy-compliance/` (gdpr, hipaa, encryption-privacy, data-minimization)

## Usage

```
@security-review
@security-review {path}
```

Or via Simple Mode: `@simple-mode *security-review {path}`.

Provide a concise summary and prioritized remediation hints.