security-review

功能与用途

Perform exhaustive zero-trust security audits of codebases, including dependency forensics, malicious code detection, secrets scanning, CI/CD security, and supply-chain attack analysis. Use when users request security reviews, code audits, vulnerability assessments, dependency analysis, secret scanning, malware detection, supply-chain security checks, or when reviewing code from external sources (GitHub, Hugging Face, blogs, gists, LLM-generated code, snippets, libraries, templates). Apply a paranoid, adversarial, forensic mindset assuming compromise until disproven.

快速开始

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。