octopus-security-audit

# Security Audit Skill **Your first output line MUST be:** `🐙 **CLAUDE OCTOPUS ACTIVATED** - Security Audit` Invokes the security-auditor persona for thorough security analysis during the `ink` (deliver) phase. Supports both quick OWASP scanning and full adversarial red/blue team testing. ## Usage ```bash # Quick scan via security-auditor persona ${HOME}/.claude-octopus/plugin/scripts/orchestrate.sh spawn security-auditor "Scan for SQL injection vulnerabilities" # Adversarial red team via squeeze workflow ${HOME}/.claude-octopus/plugin/scripts/orchestrate.sh squeeze "Security audit the authentication module" # Via auto-routing (detects security intent) ${HOME}/.claude-octopus/plugin/scripts/orchestrate.sh auto "security audit the payment processing module" ``` ## Modes (Auto-Detected) | Mode | Auto-Trigger | Confidence Gate | Scope | |------|-------------|----------------|-------| | **Quick** (default) | Standard security scan, no sensitive files in diff | 8/10 — only high-confidence findings | Changed files only | | **Deep** (auto-escalated) | Diff touches auth/security/CI files, OR explicit request | 2/10 — flag anything suspicious | Entire codebase | **Auto-escalation to Deep mode:** The skill automatically switches to Deep mode when ANY of these are true: - Diff includes files matching: `*auth*`, `*login*`, `*password*`, `*session*`, `*token*`, `*secret*`, `*crypt*`, `*oauth*`, `*saml*`, `*jwt*`, `*permission*`, `*rbac*`, `*acl*` - Diff includes CI/CD files: `.g...