Security Domain Router

← All skills · Canonical ID: linmas-security-domain-router

When to use it

Route unclear or multi-domain work to the best-fit specialist before context expands.

When to choose another workflow

Skip routing when the task already clearly belongs to one specialist. Routing is not vulnerability validation.

Inputs and prerequisites

The system and environment in scope, the review objective, and whether the work crosses domains. Supply only authorized, sanitized material; exclude secrets and personal data.

Requires Node.js 24+ for the CLI and a supported host. Codex plugin and Claude managed installation are separate paths; manual Markdown portability is not verified runtime parity.

Install and verify

npx --yes linmas@0.9.1 detect
npx --yes linmas@0.9.1 install linmas-security-domain-router
npx --yes linmas@0.9.1 doctor

Choose the intended host when prompted, then restart it and create a fresh task. See installation paths and troubleshooting.

Example request

Use linmas-security-domain-router. My owned API change includes authorization code and cloud IAM changes. Recommend the first specialist, explain why, name one alternate if scope changes, and list missing inputs. Do not execute commands.

This is an illustrative natural-language request, not a recorded model response or a guaranteed host-specific slash command.

Expected output

One best-fit skill, why it fits, one alternate if scope changes, and missing inputs to collect next.

Verify the result

Check the recommendation against the actual objective and the specialist source. Split multi-domain work into bounded follow-ups; a route is not a security finding.

Safety and evidence

Human review remains required. False positives, missed findings, and incomplete context remain possible. A policy pass is not certification. Offline fixtures do not call a model; live provider reviews may transmit named inputs and incur costs.

Editorial guide checked against v0.8.0 canonical instructions on 2026-09-08, not a duplicate skill body or evidence of a host test.

Continue learning

Run the local authorization review tutorial to learn the evidence-and-regression loop; it demonstrates application review, not cloud deployment validation. Read what security review means for AI-generated code.