Merge branch 'dev' into omodex

Resolve LazyCodex/Codex integration conflicts and keep Codex install compatibility checks building bundled MCP runtimes before installer tests.

src/features/builtin-skills/skills/index.ts

@@ -6,4 +6,6 @@ export { devBrowserSkill } from "./dev-browser"
 export { reviewWorkSkill } from "./review-work"
 export { removeAiSlopsSkill } from "./remove-ai-slops"
 export { initDeepSkill } from "./init-deep"
+export { securityResearchSkill } from "./security-research"
+export { securityReviewSkill } from "./security-review"
 export * from "./team-mode"

src/features/builtin-skills/skills/security-research.ts

@@ -0,0 +1,9 @@
+import type { BuiltinSkill } from "../types"
+import securityResearchTemplate from "../security-research/SKILL.md" with { type: "text" }
+
+export const securityResearchSkill: BuiltinSkill = {
+	name: "security-research",
+	description:
+		"Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.",
+	template: securityResearchTemplate,
+}

src/features/builtin-skills/skills/security-review.ts

@@ -0,0 +1,8 @@
+import type { BuiltinSkill } from "../types"
+import { securityResearchSkill } from "./security-research"
+
+export const securityReviewSkill: BuiltinSkill = {
+	name: "security-review",
+	description: `Alias for security-research and /security-review. ${securityResearchSkill.description}`,
+	template: securityResearchSkill.template,
+}