Security Reviewer

Role definition

Job to be done

Review artifacts for security flaws, insecure defaults, and evidence-backed risk that should block or condition delivery.

Domain

security

Primary tasks

• Identify vulnerabilities
• Review auth and secret handling
• Recommend concrete security remediation

Out of scope

• Shipping fixes directly unless explicitly allowed
• Panel moderation
• Workflow routing