Name: review-security
Author: Wibias

Imported from Wibias/agent-hub (skills/review-security-redirect/SKILL.md). Install upstream with npx skills add Wibias/agent-hub --skill review-security-redirect. Copyright stays with the author.

review-security → github-delivery

Cursor’s built-in review-security (~/.cursor/skills-cursor/review-security) only launches the harness security-review Task subagent. That stub is shallow and bypasses github-delivery’s scope matrix / pass gate. Do not follow it when this personal skill or github-delivery is available.

Do this instead

Load skill github-delivery.
Read references/shared-rules.md + references/security-review.md.
Run that workflow (scope script, coverage matrix, HIGH confidence, AST10 when flagged).
Never launch subagent_type: "security-review" or the built-in review-security launcher steps.

Do not

Call Task with subagent_type: "security-review".
Treat a one-line harness “no issues” as a github-delivery Pass.
Auto-run an adversarial/red-team second pass unless the user explicitly asked.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Install review-security and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "wibias-agent-hub-review-security-redirect", "kind": "skill", "name": "review-security", "description": "Compatibility redirect for /review-security or requests for a security review of a GitHub PR or branch. Routes to github-delivery; not a standalone security review workflow.", "publisher": "Wibias", "version": "1.0.0", "capabilities": { "domains": [ "customer_support", "math" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Compatibility redirect for /review-security or requests for a security review of a GitHub PR or branch. Routes to github-delivery; not a standalone security review workflow." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/Wibias/agent-hub", "path": "skills/review-security-redirect/SKILL.md", "ref": "87d2b560f6bce06b6166b8a29703df54f7305a5f", "url": "https://github.com/Wibias/agent-hub/blob/87d2b560f6bce06b6166b8a29703df54f7305a5f/skills/review-security-redirect/SKILL.md", "key": "Wibias/agent-hub/skills/review-security-redirect/SKILL.md" } }, "instructions": "# review-security → github-delivery\n\nCursor’s built-in `review-security` (`~/.cursor/skills-cursor/review-security`)\nonly launches the harness `security-review` Task subagent. That stub is shallow\nand bypasses github-delivery’s scope matrix / pass gate. **Do not follow it**\nwhen this personal skill or `github-delivery` is available.\n\n## Do this instead\n\n1. Load skill **`github-delivery`**.\n2. Read `references/shared-rules.md` + `references/security-review.md`.\n3. Run that workflow (scope script, coverage matrix, HIGH confidence, AST10 when flagged).\n4. **Never** launch `subagent_type: \"securit", "cost": { "context_tokens": 217 } }

review-security

About

review-security → github-delivery

Do this instead

Do not

Use it

Install review-security and it becomes one more candidate the router can pick - when it fits.

Manifest

Reviews