Security Scan - Multi-Agent Vulnerability Audit

Three-phase security audit pipeline using agent teams. Each phase builds on the previous phase's output.

Phase Overview

1. Discovery — Scan codebase, find vulnerabilities (including 0-day)
2. Verification — Two-round cross-verification of discovered vulnerabilities
3. Validation — PoC coding or analysis documentation for confirmed vulnerabilities

Pre-flight: Project Index Check

Before collecting configuration, check whether the target project has proper context files:

1. Use Glob to check if {project_path}/CLAUDE.md exists
2. Use Glob to check if {project_path}/.claude-index/ directory exists

If both exist → Proceed to Quick Start. These files provide critical project context that agents will use during scanning.