security-review
Use for application security review covering OWASP-style categories, secrets, auth boundaries, dependency risk handoffs, and prompt-injection escalation.
SKILL.md.claude/skills/security-review/SKILL.md
GitHubSecurity Review
Apply the checklist in references/checklist.md. Keep findings evidence-first and classify severity as Critical, High, Medium, Low, or Info.
Dependency tool execution is owned by dependency-audit when shell access is needed. Prompt-construction issues must also invoke prompt-safety-review.