What problem does it solve?
This Skill identifies security holes, false assumptions, and failure modes in diffs, commits, PRs, and full codebases so teams can block risky merges and prioritize fixes with evidence rather than opinions.
Core Features & Use Cases
- Multi-mode input: Accepts PR numbers/URLs, commit hashes, --pending changes, or full codebase scans and resolves the appropriate diff and context.
- Three-stage workflow: Runs spec compliance, code quality, and always-on adversarial (red-team) review with scope gates, adjudication, and re-review optimizations.
- Actionable outputs: Produces findings with severity, category, location, attack, impact, and fix guidance plus Accept/Reject/Defer verdicts and integration points for task pipelines and re-verification.
- Use case: Audit a merge-ready PR to surface critical security issues that must be fixed before merging, convert medium findings into tracked tasks, and verify fixes with targeted diffs.
Quick Start
Run an adversarial review on PR #123 and return a concise, evidence-based report listing accepted, rejected, and deferred findings with suggested fixes.