security-review

Review a diff, branch, or PR for exploitable security defects. Fans out read-only subagents per defect class (injection, authz, secrets, SSRF, supply chain, CI permissions, agent tool and MCP config, and more) and reports only findings backed by file:line, an exploit path, and evidence. Ends with block, fix-before-merge, or ok.