security-review

Coordinate a multi-agent security audit and return findings as JSON.

20|Updated Feb 27, 2026
One-click install
npx skills add https://github.com/thejefflarson/soundcheck --skill security-review-thejefflarson
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/thejefflarson/soundcheck/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/thejefflarson/soundcheck --skill security-review-thejefflarson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Use when the user types /security-review or explicitly requests a full security audit of the current code.

Core Features & Use Cases

Full audit via isolated subagents. Main context shows only findings.

Quick Start

Trigger a full code security audit and report the findings.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit and code review for my codebase?

An automated security audit coordinates isolated subagents to perform threat modeling, hotspot mapping, and auditor checks across your codebase, returning structured JSON findings with remediation guidance.

What is threat modeling and hotspot mapping in an automated security review?

Threat modeling and hotspot mapping are stages in an automated security review that identify potential vulnerabilities and high-risk code areas before targeted auditor checks are executed by subagents.

Can I get structured JSON output from an OWASP security audit?

Yes, an automated OWASP security audit can surface findings in a structured JSON payload, providing a narrative suitable for remediation alongside specific remediation guidance for identified code vulnerabilities.

How do I run a full security audit without cluttering my main context window?

You can run a full security audit using isolated subagents that execute threat modeling and auditor checks in the background, ensuring the main context window displays only the final structured findings.

Does an automated code security review cover the entire codebase or just specific files?

An automated code security review coordinates a full audit of the current codebase, systematically progressing through defined stages from threat modeling to final auditor checks to surface all relevant findings.