skills.rest
tbeack
tbeackCOMMUNITY
Explore all skills by this author →
GitHub

sec-review-team

Orchestrate multi-agent security reviews across codebases into a REPORT.md.

7|3|Updated Mar 31, 2026
Search Tags:#security#multi-agent#orchestration#code-review#risk-reporting#sec-review
One-click install
npx skills add https://github.com/tbeack/fsad_playbook --skill sec-review-team
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sec-review-team
Source: https://github.com/tbeack/fsad_playbook/tree/main/skills/sec-review-team
Command: npx skills add https://github.com/tbeack/fsad_playbook --skill sec-review-team

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The sec-review-team skill orchestrates a multi-agent security review across a codebase, enabling parallel expert findings and consolidated reporting to surface risks early.

Core Features & Use Cases

  • Automated roster selection based on detected stack signals; parallel specialist findings with deduplication; final REPORT.md with severity ranking.
  • Works on codebases, diffs, or specific subdirectories; suitable for pre-release hardening, security audits, and branch reviews.
  • Integrates with a library of 13 specialists to cover auth, data exposure, supply chain, etc.

Quick Start

Use the sec-review-team skill to run a review on a target repository path.

Frequently Asked Questions about sec-review-team

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a multi-agent security review across my codebase?▼

Multi-agent security review is orchestrated by detecting stack signals to select specialists, running 13 agents in parallel, and consolidating deduplicated findings with severity ranking into a single REPORT.md.

Can I run a security audit on just a branch diff or specific subdirectory?▼

Yes, security audits can be run on codebases, diffs, or specific subdirectories, making it suitable for branch reviews and targeted pre-release hardening without scanning the entire repository.

What is included in automated risk reporting for code review?▼

Automated risk reporting consolidates parallel specialist findings into a single REPORT.md, featuring deduplicated root issues and severity ranking to surface risks early.

Does multi-agent security review work with infrastructure-as-code and CI pipelines?▼

Yes, multi-agent security review applies to repositories spanning web apps, desktop apps, infrastructure-as-code, and CI pipelines for comprehensive pre-release hardening.

How are specialist agents selected for a codebase security audit?▼

Specialist agents are selected automatically based on detected stack signals, maintaining a roster from those signals to run 13 specialists in parallel covering auth, data exposure, and supply chain.

Related Skills

Explore More Software Engineering Skills→
vishalkhondrevishalkhondre

00-recon

Scans repository structure to detect languages, frameworks, and build systems.

Community
Intermediate
oliverjone01-devoliverjone01-dev
1

audit

Audit UI components for accessibility, performance, theming, and responsive issues.

Community
Intermediate
anderson-0anderson-0
4

security-audit

Audit application security risks across source code, dependencies, and authentication systems.

Community
Advanced
melikhanmutlumelikhanmutlu

parallel-agents

Coordinate multiple specialized agents to analyze codebases and synthesize unified insights.

Community
Advanced