oma-deepsec

Drive Vercel's deepsec agent-powered vulnerability scanner end-to-end: installing the .deepsec/ workspace, bootstrapping INFO.md, running cost-aware scan / process / triage / revalidate / export passes, gating PRs with process --diff, writing custom matchers, and triaging findings. Use whenever the user mentions deepsec, asks an agent to scan a repo for vulnerabilities, runs into pnpm deepsec / bunx deepsec commands, wants a CI-based PR security review, sees a .deepsec/ directory, or asks about INFO.md / matchers / process --diff / revalidate, even when the tool name is not spoken. Deepsec scans are expensive (a single full scan can cost hundreds to tens of thousands of dollars) so the skill exists in part to keep the user from getting surprised.