Security review of a change, PR, or module - authentication, authorization, input handling, secrets, crypto, data isolation, supply chain. Use when the user asks for a security review, when reviewing changes that touch auth/input/secrets/storage/pipelines, or as a focused review inside review-pr.
