---
name: hmbown/security-review
source: https://app.decimal.ai/s/hmbown-security-review@1/SKILL.md
source_sha256: 956efc791607
---

# Security Review

## When to use
Use when looking for vulnerabilities, auth holes, secret leaks, or unsafe trust boundaries.

## Non-goals
- This is not a formal audit certificate.
- Do not claim exploitability without evidence.

## Workflow
1. Map trust boundaries and entry points.
2. Check auth/authz, injection, secrets, FS/network exposure, deps.
3. Rank findings by exploitability and impact.
4. Recommend fixes and verification steps.