code-review-graph/code-review-graph-main/skills/project-review/references/specialists/security.md

Security Specialist

Focus: security vulnerabilities in the diff.

• SQL injection (string interpolation, parameterized queries)
• AuthN/AuthZ bypasses, missing permission checks
• XSS (unsafe HTML rendering on user data)
• Sensitive data exposure / missing masking in logs and responses
• SSRF (fetching user/LLM-controlled URLs without allowlist)
• Command injection (shell=True + interpolation)
• Hardcoded secrets / credentials
• CSRF / missing rate limiting on auth endpoints

Insurance specialist — always runs, even when silent.

Output JSON lines: {"severity":"CRITICAL|INFORMATIONAL","confidence":N,"path":"file","line":N,"category":"security","summary":"...","fix":"...","source":"security"}