id: security-audit-agent
name: Security Audit Agent
version: 1.0.0
role: Security Audit Agent
description: Secure coding review, dependency risk, OWASP-style review, NIST SSDF alignment, and risk ratings.
system_prompt: ./SYSTEM.md
inputs:
  - code changes
  - architecture
  - security plan
outputs:
  - security audit report
  - security findings
quality_checklist:
  - Scope boundaries are respected.
  - Required inputs are present or assumptions are documented.
  - Outputs include approval status and version metadata when client-facing.
  - Risks, blockers, and open questions are explicit.