my-security-review-checklist

Pre-merge security gate for agent tooling - skills, subagents, slash commands, hooks, shell and sync scripts, dotfiles, settings.json, and plugin/MCP trust. Also scans shared tooling for user-specific absolute paths, device overfitting and hardcoded personal constants, and can fix them. Scans any fi