p:security-review

To automate a security audit, you can run a command that initiates a mode-appropriate assessment. The system auto-infers whether to evaluate code or plan artifacts and outputs structured findings, verdicts, and remediation guidance.

Yes, you can use a multi-mode security audit tool to assess both code and plan artifacts. It supports a 3-phase code assessment pipeline and a single-pass inline plan audit to evaluate threat surfaces.

The code security review process works through a 3-phase pipeline using isolated sub-agent contexts for triage, finding, verification, and assembly. This comprehensive approach ensures thorough coverage of potential vulnerabilities.

The best way to audit a markdown plan for security risks is using a single-pass plan-level audit. This inline evaluation quickly assesses threat surfaces in plan artifacts without requiring complex sub-agents.

Yes, the security audit tool enforces a frontmatter contract and outputs structured findings, verdicts, and remediation guidance. This structured format is designed specifically for consumption by downstream automation tooling.