Code Review Security

Overview

Use this skill to identify exploitable weaknesses and data-protection risks before merge.

Scope Boundaries

• Use this skill when the task matches the trigger condition described in description.
• Do not use this skill when the primary task falls outside this skill's domain.

Inputs To Gather

• Changed trust boundaries (external input, authn/authz, storage, outbound calls).
• Sensitive data categories and handling paths.
• Existing security controls (validation, encoding, policy checks, audit logs).
• Threat model assumptions relevant to the changed area.

Deliverables

• Security findings with exploit path and severity.
• Risk acceptance/escalation items for unresolved issues.
• Required remediation and verification actions.