Iron Law: Never approve a security review with unresolved CRITICAL or HIGH findings; always escalate to the human before proceeding past a security gate.

Security Review Skill

Purpose

Provides security review methodology, vulnerability checklists, and remediation patterns for application code.

Process

1. Load checklist -- Read the security review checklist for review categories and severity levels
2. Scan code -- Use Grep/Glob to find security-sensitive patterns
3. Evaluate -- Check each finding against the checklist
4. Report -- Output findings with severity and remediation guidance

For the complete security review checklist and methodology:

Read reference/security-review-checklist.md