Security Review

This is a bundled local Bug Hunter companion skill. It packages a security-focused review workflow without introducing any external marketplace dependency.

Purpose

Use this skill for deeper security audits than a simple bug hunt, especially when the user wants:

• a full security review
• PR security validation
• weekly security scanning
• dependency reachability + code review together
• threat-model-driven analysis

Workflow

1. Ensure .bug-hunter/threat-model.md exists.
   • If missing, invoke the bundled threat-model-generation skill.