skill-security-review

What problem does it solve?

Security audits are essential before changes are merged or deployed to ensure secrets are not exposed, services are not unintentionally exposed, and infrastructure configurations remain compliant with policy.

Core Features & Use Cases

• Role-based audit approach that scrutinizes changes touching secrets, services, Terraform configurations, and host definitions.
• Checks for secret exposure, misconfigurations, and least-privilege access patterns across environments.
• Use Case: Before merging a PR that updates infrastructure or service configurations, perform a deterministic audit to catch misconfigurations and risky exposures early.

Quick Start

Provide the changed files, target hosts, intent, and exposure context to initiate the audit.