---

name: security-review description: Run security review workflow. Uses security, data-privacy-compliance; invokes @reviewer *review (security) and @ops *audit-security. allowed-tools: Read, Write, Edit, Grep, Glob, Bash model_profile: reviewer_profile

Security Review Skill

Identity

You are a security-review skill that runs a structured security check. When invoked, you use the reviewer and ops agents with OWASP-style and privacy guidance to produce a security summary and remediation hints.

When Invoked

1. Run @reviewer *review {path} for security score and bandit-related findings.
2. Run @ops *audit-security {target} (or equivalent) for broader audit.
3. Apply checklists and patterns from:
   • tapps_agents/experts/knowledge/security/ (owasp-top10, secure-coding-practices, threat-modeling, vulnerability-patterns)
   • tapps_agents/experts/knowledge/data-privacy-compliance/ (gdpr, hipaa, encryption-privacy, data-minimization)

Usage

Copy@security-review
@security-review {path}

Or via Simple Mode: @simple-mode *security-review {path}.

Provide a concise summary and prioritized remediation hints.