Security Pass

Goal

Run a Security Pass: a full security review of an existing project that adapts to whatever that project actually is — its domain, stack, architecture, and the documents it happens to have. This is not a fixed checklist run blindly against every project. It is a capability (the Security Harness) that, each time it executes, first builds a real model of the system and only then hunts for risk inside that model.

The flow this skill implements, every time:

PROJECT → DISCOVER → UNDERSTAND → ANALYZE → CORRELATE → DEDUPLICATE → TRIAGE → REPORT

Non-negotiable rule