Use for five-agent-dev-team secret handling, workflow permissions, Docker safety, dependency audit, local binding, and supply-chain review.
Scanned 9/9/2026
Install to Claude Code
Skills Directorynpx -y skills add onfire7777/universal-ai-skills-library --skill five-agent-security-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Five Agent Security Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/onfire7777-five-agent-security-review)More formats (shields.io, HTML) on the badges page.
---
name: five-agent-security-review
description: Use for five-agent-dev-team secret handling, workflow permissions, Docker safety, dependency audit, local binding, and supply-chain review.
metadata:
short-description: Security review for the five-agent dev team
---
# Five Agent Security Review
Check:
- least-privilege workflow permissions
- no secrets in code, config, logs, PR bodies, state, or docs
- no broad OAuth/GitHub scopes without a spec reason
- Docker compose output is not resolved into state or logs
- services bind to `127.0.0.1` unless explicitly required
- `npm audit fix --force` is never used
- moderate advisories are handled by documented policy, not hidden
Evidence should be compact: command names, pass/fail, and redacted risk notes.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
