security-review

Review a software change or CI workflow for technology-neutral security, privacy, data-loss, and authority risks using verifiable evidence. Use for trust boundaries, untrusted or fork-controlled input, secrets, sensitive data, permissions, privileges, or destructive and external actions. This owns requests limited to security risks. When security is secondary to broader work, compose with the owning workflow; defer stack-specific remediation to dedicated skills.