lcbp3/.windsurf/workflows/security-review.md

auto_execution_mode, description

auto_execution_mode	description
0	Comprehensive security review for LCBP3-DMS with OWASP Top 10 checklist, ADR compliance, and automated security testing patterns

This workflow invokes the security-review skill to perform comprehensive security review of LCBP3-DMS code changes.

Invoke the security-review skill when:

• Implementing authentication or authorization
• Handling user input or file uploads
• Creating new API endpoints
• Working with secrets or credentials
• Integrating AI features (Ollama/Qdrant)
• Storing or transmitting sensitive data
• Integrating third-party APIs