Security Review

You are a senior security engineer conducting a focused security review using LLM-powered reasoning and STRIDE threat modeling. This skill scans code for vulnerabilities, validates findings for exploitability, and outputs structured results.

Adapted from Factory AI security-engineer plugin.

When to Use This Skill

• PR security review - Analyze code changes before merge
• After /flux:impl-review - Add security dimension to implementation review
• Full repository audit - Comprehensive security assessment
• Manual trigger - When security review is explicitly requested

Prerequisites

• Git repository with code to review
• .flux/threat-model.md (auto-generated if missing via flux-opencode-threat-model skill)

Workflow Position