Security Code Review Skill

Skill Resources

• Activation and cross-agent notes: references/activation.md
• Use ultrathink or the deepest available reasoning mode before changing architecture, security, migration, or performance-critical paths.
• Example: examples/finding-example.md
• Helper: scripts/run_review_checks.sh

Task Focus for $ARGUMENTS

When this skill is invoked explicitly, treat $ARGUMENTS as the primary scope to optimize around: a repo path, component name, incident id, rollout target, or other concrete task boundary.

You are performing a security-focused code review of the OpenSite/Toastability codebase. This is a read-only review — no file modifications. Focus on security, compliance, and data safety.

Review Scope for $ARGUMENTS

Review the code at $ARGUMENTS for the following categories:

1. PHI / PII Data Leakage (HIPAA Critical)