---
description: 'Runs security gates: SAST with OWASP/CWE mapping, dependency vulnerability scans, secret detection, SBOM generation for compliance, pre-release security verdict. Trigger for ''is this secure'', ''audit dependencies'', ''check for secrets'', ''security report'', ''is this package safe'', ''compliance review''. Not for governance process; use /ai-governance instead. Not for runtime payload inspection; use prompt-injection-guard hook instead.'
mirror_family: opencode-commands
generated_by: ai-eng sync
canonical_source: .claude/skills/ai-security/SKILL.md
edit_policy: generated-do-not-edit
---

Use the `ai-security` skill to handle this request. OpenCode will lazy-load the canonical skill body via the `skill` tool; arguments below are forwarded verbatim.

$ARGUMENTS
