/security Security Audit Workflow Dedicated security analysis for sensitive code. When to Use "Security audit" "Check for vulnerabilities" "Is this secure?" "Review authentication code" "Check for injection attacks" Before handling auth, payments, user data After adding security sensitive features Workflow Overview Agent Sequence Agent Role Output 1 aegis Comprehensive security scan Vulnerability report 2 arbiter Verify fixes, run security tests Verification report Why Dedicated Security? The /review workflow focuses on code quality. Security needs: Specialized vulnerability patterns Dependency scanning Secret detection OWASP Top 10 checks Authentication/authorization review Execution Phase 1: Security Audit Phase 2: Verification (After Fixes) Security Scopes Full Codebase Specific Area Single File Dependencies Only Example After Fixes OWASP Top 10 Coverage Risk Checked A01 Broken Access Control ✅ A02 Cryptographic Failures ✅ A03 Injection ✅ A04 Insecure Design ✅ A05 Security Misconfiguration ✅ A06 Vulnerable Components ✅ A07 Auth Failures ✅ A08 Data Integrity Failures ✅ A09 Logging Failures ✅ A10 SSRF ✅ Flags deps : Dependencies only verify : Re run after fixes owasp : Explicit OWASP Top 10 report secrets : Focus on secret detection