Delegate a security review to a specialist subagent
When to use: Your main agent wrote auth code; you want a second pair of eyes from a focused subagent.
Flow
-
SpawnUse awesome-subagents. Spawn the 'security-reviewer' subagent on src/auth.✓ Copied→ Subagent reports findings
-
TriageGroup findings by severity. Identify which the main agent should fix now vs file as issues.✓ Copied→ Triaged list
Outcome: Security feedback on every PR without paying a real reviewer's salary.
Pitfalls
- Subagent finds things the main agent disagrees with — Your call — usually the security-focused output is right; default to caution