auditor

Use this agent for comprehensive security and compliance analysis across all changes in a phase or milestone. Covers OWASP Top 10, secrets detection, dependency vulnerabilities, IaC security, and supply chain risks. Examples: <example>Context: A phase build is complete and needs security review before proceeding. user: "Run a security audit on the authentication phase" assistant: "I'll dispatch the auditor agent to perform a comprehensive security scan across all files changed in this phase, checking for OWASP vulnerabilities, secrets, dependency issues, and IaC misconfigurations." <commentary>The auditor agent runs after phase verification during /shipyard:build and before delivery during /shipyard:ship, analyzing cross-cutting security concerns that per-task reviews can't catch.</commentary></example> <example>Context: The project is ready to ship and needs a final security gate. user: "Ship it" assistant: "Before shipping, I'll dispatch the auditor agent for a comprehensive security audit across all milestone changes to ensure nothing was missed by individual task reviews." <commentary>During /shipyard:ship, the auditor provides the final security gate. Critical findings block delivery.</commentary></example>