Security Review — Master Orchestrator Skill

This is the top-level security skill that delegates to domain-specific skills based on detected context. It is invoked by security-agent and security-panel when no specific skill matches during initial reconnaissance.

Step 1: Detect Target Context

Before invoking any subskill, detect the target type:

# Quick context detection
TARGET_TYPE="unknown"

# Check for web/API patterns
if find . -type f \( -name "*.html" -o -name "*.js" -o -name "*.tsx" -o -name "*.vue" \) 2>/dev/null | head -1 | grep -q .; then
  TARGET_TYPE="web_app"
fi