What problem does it solve?
This Skill automates monthly security review work for a codebase, helping teams detect risky changes, document findings, and escalate serious issues without manual report assembly.
Core Features & Use Cases
- Recent-change analysis: Reviews the last 30 days of repository activity for authentication, authorization, dependency, hook, and secret-handling changes.
- Structured reporting: Appends findings to quarterly security audit logs and updates an index for traceability.
- Escalation workflow: Opens issues when Critical or Major findings are detected, while leaving Minor findings as report-only items.
- Use case: A team wants a repeatable monthly CISO-style audit that preserves knowledge, enforces safety gates, and produces an actionable security summary.
Quick Start
Ask the skill to run a monthly security audit for the last 30 days, save the report to the security log, and create an issue if serious findings are discovered.