feat(skills): add security-research orchestration

Ship the documented Team Mode security-research capability as an .agents skill and expose /security-research through transition command wrappers.

The exact security-review slug has no reachable history hits; security-research is the documented missing artifact from README and issue #3887.

Refs #3887

Plan: plans/security-research-restore.md
This commit is contained in:
YeonGyu-Kim
2026-05-23 14:03:38 +09:00
parent 1ecf4f6475
commit 2bfad4909e
5 changed files with 246 additions and 7 deletions
+4 -3
View File
@@ -4,9 +4,9 @@
## OVERVIEW
Project-scope OpenCode configuration: 5 skills and 4 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.
Project-scope OpenCode configuration: 5 skills and 5 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.
**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode``oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 4 more, mirrors the 4 commands). Both directories load during the transition; consumers should prefer `.agents/`.
**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode``oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 5 commands). Both directories load during the transition; consumers should prefer `.agents/`.
## SKILLS (5)
@@ -20,7 +20,7 @@ Project-scope OpenCode configuration: 5 skills and 4 slash commands committed al
Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `references/`, `assets/`).
## COMMANDS (4 slash commands)
## COMMANDS (5 slash commands)
| Command | Purpose |
|---------|---------|
@@ -28,6 +28,7 @@ Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `refer
| `/omomomo` | Easter-egg command — about oh-my-opencode. |
| `/publish` | Publish via GitHub Actions workflow. Argument: `<patch|minor|major>`. |
| `/remove-deadcode` | Remove unused code with LSP-verified safety + atomic commits. |
| `/security-research` | Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers. |
## OTHER CONTENTS
+16
View File
@@ -0,0 +1,16 @@
---
description: Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers
---
<command-instruction>
Load and follow the `security-research` skill exactly.
```text
skill(name="security-research")
```
</command-instruction>
<user-request>
$ARGUMENTS
</user-request>