Security Review Skill (On-Demand)

Purpose

This document defines on-demand security review guidance for code and configuration changes. It complements the always-on secure-by-default rules defined in .github/copilot-instructions.md.

This skill applies only at development and authoring time. Runtime, host, cluster, or organizational security controls are explicitly out of scope.

Security Review Trigger Points

Load this security review skill when changes involve: