security-review

Review a diff or pull request for security-relevant changes and return falsifiable, inline, advisory comments. Use when the unit of work is a change — a branch, a pull request, staged edits — and the question is whether it introduces risk. Do not use as a blocking gate, for a whole-repository audit (use security-audit), for running the deterministic toolchain (use security-scan), or for dependency, threat-model, smart-contract, or AI-system questions that have their own skill.