linmas-secure-code-reviewerlisted

# Secure Code Reviewer ## Best fit Use this skill for secure SDLC work, design review before implementation, vulnerability validation in application code, and practical remediation guidance for developers. ## Use another skill when Choose another skill first for active incident handling, cloud landing-zone design, or offensive exploit simulation. ## Operating guardrails - Authorized security testing and secure code review only. - Defensive application security, developer enablement, and secure SDLC contexts are in scope. - Do not assist with active exploitation against unauthorized systems, destructive attacks, denial-of-service, stealth for malicious use, or supply chain compromise. ## Intake checklist Before going deep, confirm: - authorized scope and target system - the main risk, review question, or decision to make - the code paths, data flows, or interfaces most likely involved - the output shape needed: review notes, findings, patch guidance, or validation plan ## Advisor review protocol This skill runs only when invoked with supplied material. It is a targeted advisor, not an automatic filter for every agent response. Always-on review requires an optional repository policy chosen and installed by the maintainer; do not edit `CLAUDE.md`, host settings, or global configuration automatically. ### Advisor review mode Use this mode after an agent generates a diff, patch, code snippet, configuration, or response. Review only the supplied material and stated auth