security-review-skill-creator

Generating a security audit skill from project documentation uses Project Mode, which ingests design docs and risk considerations to auto-generate a complete SKILL.md, checks, and known-issues skeleton for immediate review.

Yes, you can create code review prompts from a reference library using Generic Mode, which generates language or framework-based audit prompts to enable consistent code reviews across different tech stacks.

Automating the conversion of scattered security docs into a consistent audit skill is done by loading reference materials into the generator, which outputs modular checks and known-issues directories aligned with a Security Grader.

The generated security review skill supports iterative refinement through a Draft, Test, and Iterate loop, utilizing evaluation feedback from the Security Grader alongside known-issues references to improve audit accuracy.

A Security Grader is not strictly required to deploy the generated skill, but it enables the evaluation framework needed for the Draft, Test, and Iterate refinement loop to function effectively.