What problem does it solve? Finding real vulnerabilities in a codebase requires deep review that manual audits and noisy SAST tools often miss, and turning findings into safe fixes is slow. This Skill runs a team of agents that maps the architecture, hunts for vulnerabilities, verifies every finding through an adversarial panel, and produces reviewable patch files. ## Core Features & Use Cases - Codebase scanning: Scan the whole repository or a scoped directory at low, medium, high, or max effort, with findings verified by a three-lens panel before reaching the report. - Change scanning: Scan a branch's diff, a pull request, or a single commit so small changes come back in minutes. - Patch suggestions: Turn confirmed findings into targeted .patch files, each developed in a scratch checkout, reviewed by an independent verifier, and validated with git apply --check β nothing is ever committed or pushed automatically. - Use Case: Before merging a feature branch, ask for a scan of the branch's changes; receive a timestamped report directory with a human-readable results file, machine-readable JSONL for CI gates, and optionally verified patch files you apply yourself. ## Quick Start Ask Claude to scan this repository for security vulnerabilities at medium effort and confirm when prompted.
