---
name: security-assessment
description: Perform evidence-based defensive security review of repository changes.
---

# Security assessment
1. Inspect authn/authz boundaries, input validation, secrets handling and dependencies.
2. Identify only concrete code-level issues with evidence and impact.
3. Suggest minimal mitigations and non-destructive verification.
4. Never request credential dumps or attack production services.