repo-security-review - Run a Whole-Repository Security Review
Audits the whole repository by area, verifies findings adversarially, cites code evidence, and produces a scored security report.
Tags
Updated: 2026-09-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Load project audit areas
- Audit codebase by area
- Verify findings adversarially
- Cite grounded code evidence
- Generate a score report
- Refresh configured security artifacts
- Run configured external scans
Inputs
- Repository codebase
- Project security areas file
- method.config.md configuration
- Security architecture document
- Public security page
- Previous security report
- Configured scan host
Outputs
- Evidence-cited security findings
- Adversarial verification statuses
- Security score report
- Refuted findings appendix
- Refreshed configured security artifacts
- Scaffolded areas file when missing
- External scan availability results
Requirements
- Repository workspace access
- Read-only file and search tools
- Writable report or artifact paths
- Sub-agent model role support
- WebFetch for configured live scans