reviewing-security-prior-art-survey

Reviews security prior-art survey artifacts against numbered acceptance conditions and emits approve or revise verdicts.

1|1|Updated May 24, 2026
One-click install
npx skills add https://github.com/bm629/agent-skills --skill reviewing-security-prior-art-survey-bm629
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reviewing-security-prior-art-survey
Source: https://github.com/bm629/agent-skills/tree/main/skills/reviewing-security-prior-art-survey
Command: npx skills add https://github.com/bm629/agent-skills --skill reviewing-security-prior-art-survey-bm629

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Security prior-art surveys produce threat-vocabulary maps, per-angle search outputs, extract records, and threat registers whose honesty cannot be verified by schema validation alone. This Skill acts as an independent acceptance gate that judges whether the research craft behind those artifacts is honest, complete against its own contracts, and proportionate, so a dishonest coverage record does not become a confidently wrong claim about what threats exist. ## Core Features & Use Cases - Deterministic-first review: Runs the co-installed producer's validator once, then judges what a validator cannot see, such as whether a coverage claim is provable or a source failure was written as a zero. - Condition-based findings: Applies the numbered bar in references/conditions.md across all artifact kinds and emits VERDICT: approve or revise with condition-named findings and concrete locations. - Spot-check posture: Samples coverage cells and candidates to confirm recorded queries plausibly yield recorded results, without re-deriving the whole search. - Use Case: After authoring a threat register with the security-prior-art-survey producer, run this gate to verify coverage completeness, sanitization records, evidence-tier grounding, and vocabulary-based threat naming before approving the survey. ## Quick Start Use reviewing-security-prior-art-survey to judge the threat register in docs/security/register.md and report any blocking findings.

Frequently Asked Questions about reviewing-security-prior-art-survey

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a security prior-art survey artifact?

Identify the artifact kind, run the producer's validator once for its kind, then apply every numbered condition from references/conditions.md in a single pass. Emit VERDICT: approve or VERDICT: revise followed by findings that each name a condition number and a concrete location.

What artifacts does this security review gate accept?

It judges four kinds: a threat-vocabulary map, a per-angle search output, an extract record for one source item, and the threat register from synthesis. Each kind has its own condition block, with sanitization and schema-validity conditions applying across kinds.

Does this skill require the security-prior-art-survey producer package?

Yes, the producer package must be co-installed because its validator and schemas are the mechanical half of the gate. If the package is missing, the skill reports that and stops rather than hand-checking what the validator owns.

Can this skill fix or re-run a failing security survey?

No, it is review-only and never authors, fixes, or re-derives the artifact. The producer skill revises based on the findings; re-running the search to check it is explicitly an anti-pattern.

What happens when a search output arrives without its vocabulary map?

The review stops and reports the missing input, because coverage completeness cannot be computed without the map. Approving a search output on the remaining assessable conditions is not allowed.

When should a thin security survey still be approved?

A thin-but-honest result in a thin domain meets the bar, since yield is never a gap. Revise only on a named condition with a concrete failure, never on style, wishes, or low result counts.