security-review

Perform evidence-based security reviews of repositories, changes, or components. Map threats and trust boundaries, trace attacker-controlled inputs, verify findings, and use bounded subagents and durable working notes for large reviews. Use for explicit security review, vulnerability analysis, or security audit requests, not ordinary code review.