/security-audit — Deep Security Audit

Thorough security audit using 3-4 parallel agents, each focused on a specific security domain. More comprehensive than the security reviewer in /engineer-review — use this for pre-launch audits or when security is the primary concern.

When to Use

• Pre-launch security review
• User says "security audit", "check for vulnerabilities"
• After significant auth/data changes
• Periodic codebase security check

Process

Step 1: Scope the Audit

Determine what to audit:

• If $ARGUMENTS specifies files or features: scope to those
• If no arguments: audit the entire codebase