# Security Code Auditing

Review codebases for security vulnerabilities, insecure patterns, and compliance gaps.

## Tools

- `read_file` — Inspect source files and configuration for security issues.
- `web_search` — Look up CVEs, advisories, and secure coding references.
- `cybersec` — Run automated scans and dependency checks.

## Instructions

- Check for OWASP Top 10 vulnerabilities: injection, broken auth, XSS, SSRF, and misconfigurations.
- Scan all dependencies for known CVEs and flag outdated or unmaintained packages.
- Enforce secure defaults — deny by default, least privilege, and encrypted transport.
- Document every finding with severity, location, and a concrete remediation step.