fix(commands): add security-review alias

.agents/AGENTS.md

@@ -4,7 +4,7 @@
 
 ## OVERVIEW
 
-Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 -> 10 skills; 5 commands).
+Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 -> 10 skills; 6 commands).
 
 Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/). When both directories declare the same skill or command name, the higher-priority scope wins per the loader's deduplication rules.
 
@@ -25,7 +25,7 @@ Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file://
 
 The 5 "NEW" skills here are skill-format equivalents of slash commands that exist in BOTH `.opencode/command/` and `.agents/command/`. They allow the same instructions to be triggered either by an explicit `/command` invocation OR by skill auto-loading on matching prompts.
 
-## COMMANDS (5 slash commands)
+## COMMANDS (6 slash commands)
 
 Identical set to `.opencode/command/`:
 - `/get-unpublished-changes`
@@ -33,6 +33,9 @@ Identical set to `.opencode/command/`:
 - `/publish`
 - `/remove-deadcode`
 - `/security-research`
+- `/security-review`
+
+`/security-review` is an alias command that loads the `security-research` skill.
 
 ## OTHER CONTENTS
 

.agents/command/security-review.md

@@ -0,0 +1,16 @@
+---
+description: Alias for the Team Mode security-research audit
+---
+
+<command-instruction>
+Load and follow the `security-research` skill exactly.
+
+```text
+skill(name="security-research")
+```
+</command-instruction>
+
+<user-request>
+$ARGUMENTS
+</user-request>
+

.opencode/AGENTS.md

@@ -4,9 +4,9 @@
 
 ## OVERVIEW
 
-Project-scope OpenCode configuration: 5 skills and 5 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.
+Project-scope OpenCode configuration: 5 skills and 6 slash commands committed alongside the source. Picked up by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/) and the slash-command discovery pipeline.
 
-**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 5 commands). Both directories load during the transition; consumers should prefer `.agents/`.
+**Relationship to `.agents/`:** `.agents/` is the migration target during the `oh-my-opencode` → `oh-my-openagent` rename. It is a SUPERSET of `.opencode/` (mirrors all 5 skills + adds 5 more, mirrors the 6 commands). Both directories load during the transition; consumers should prefer `.agents/`.
 
 ## SKILLS (5)
 
@@ -20,7 +20,7 @@ Project-scope OpenCode configuration: 5 skills and 5 slash commands committed al
 
 Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `references/`, `assets/`).
 
-## COMMANDS (5 slash commands)
+## COMMANDS (6 slash commands)
 
 | Command | Purpose |
 |---------|---------|
@@ -29,6 +29,7 @@ Each skill follows the standard layout (`SKILL.md` + optional `scripts/`, `refer
 | `/publish` | Publish via GitHub Actions workflow. Argument: `<patch|minor|major>`. |
 | `/remove-deadcode` | Remove unused code with LSP-verified safety + atomic commits. |
 | `/security-research` | Run the Team Mode security-research audit with 3 vulnerability hunters and 2 PoC engineers. |
+| `/security-review` | Alias for `/security-research`. |
 
 ## OTHER CONTENTS
 

.opencode/command/security-review.md

@@ -0,0 +1,16 @@
+---
+description: Alias for the Team Mode security-research audit
+---
+
+<command-instruction>
+Load and follow the `security-research` skill exactly.
+
+```text
+skill(name="security-research")
+```
+</command-instruction>
+
+<user-request>
+$ARGUMENTS
+</user-request>
+

script/package-layout.test.ts

@@ -124,7 +124,9 @@ describe("published package layout", () => {
     // given
     const expectedAssetPaths = collectExpectedAssetPaths()
     expect(expectedAssetPaths).toContain(".opencode/command/security-research.md")
+    expect(expectedAssetPaths).toContain(".opencode/command/security-review.md")
     expect(expectedAssetPaths).toContain(".agents/command/security-research.md")
+    expect(expectedAssetPaths).toContain(".agents/command/security-review.md")
     expect(expectedAssetPaths).toContain(".agents/skills/security-research/SKILL.md")
 
     // when