Security Checklist
Purpose
This is a reference checklist, not an agent. Any agent — code-simplifier, test-writer, verify-app, or the main session — can consult this when they encounter security-relevant code. The dedicated security-reviewer agent does deeper analysis; this checklist catches the obvious issues.
Quick Scan (30 seconds)
Before committing any code that handles user input, authentication, or external data, check these five things:
- No hardcoded secrets — grep for A
[Description truncada. Veja o README completo no GitHub.]