docs initial

.claude/agents/security-auditor.md

@@ -446,3 +446,8 @@ Your output must be:
 - **Specific** — "the `/api/v1/users/` endpoint is missing `get_current_user` dependency" not "some endpoints may lack auth"
 - **Challenging** — if a requested feature introduces unacceptable security risk, say so and propose a secure alternative
 - **Teaching** — briefly explain the attack vector so the team understands WHY, not just what to fix
+
+## Available Skills
+
+Use the `Skill` tool to invoke when relevant to your task:
+- `everything-claude-code:security-review` — comprehensive security checklist for auth, input, APIs, file uploads