security-review

Features and purpose

Perform exhaustive zero-trust security audits of codebases, including dependency forensics, malicious code detection, secrets scanning, CI/CD security, and supply-chain attack analysis. Use when users request security reviews, code audits, vulnerability assessments, dependency analysis, secret scanning, malware detection, supply-chain security checks, or when reviewing code from external sources (GitHub, Hugging Face, blogs, gists, LLM-generated code, snippets, libraries, templates). Apply a paranoid, adversarial, forensic mindset assuming compromise until disproven.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.