troykelly/security-reviewer
skills/security-reviewer/SKILL.md
Use when explicitly asked to run the security-reviewer subagent or when another skill requires the security-reviewer agent card.
$ install --global
skillsauthnpx skillsauth add troykelly/codex-skills security-reviewerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:48 PM1.8s1 file scanned
SKILL.md
- name:
- security-reviewer
- description:
- Use when explicitly asked to run the security-reviewer subagent or when another skill requires the security-reviewer agent card.
Security Reviewer Subagent
Use the security-reviewer agent card to handle this specialized task.
Run
codex-subagent security-reviewer <<'EOF'
[Provide the task context, scope, and any issue/PR numbers.]
EOF
Notes
- Include concrete scope and constraints in the context block.
- Fold the subagent output back into the main workflow.
Related Skills
troykelly/worker-protocol
data-ai
VerifiedTrustedCommunity
Defines behavior protocol for spawned worker agents. Injected into worker prompts. Covers startup, progress reporting, exit conditions, and handover preparation.
6SKILL.mdUpdated Apr 15, 2026
troykelly/worker-handover
development
VerifiedTrustedCommunity
Defines context handover format when workers hit turn limit. Posts structured handover to GitHub issue comments enabling replacement workers to continue seamlessly.
6SKILL.mdUpdated Apr 15, 2026
troykelly/worker-dispatch
data-ai
VerifiedTrustedCommunity
Use to spawn isolated worker processes for autonomous issue work. Creates git worktrees, constructs worker prompts, and handles worker lifecycle.
6SKILL.mdUpdated Apr 15, 2026
troykelly/work-intake
tools
VerifiedTrustedCommunity
Entry point for ALL work requests - triages scope from trivial to massive, asks clarifying questions, and routes to appropriate planning skills. Use this when receiving any new work request.
6SKILL.mdUpdated Apr 15, 2026