/security-review Command

Requires: Claude Code installed

1. 1

   Create the commands directory

   Project commands live in `.claude/commands/`; the filename becomes the command name.

   shellCopy

   mkdir -p .claude/commands

2. 2

   Write the command

   Create `security-review.md`. `$ARGUMENTS` is replaced with anything you type after the command.

   configCopy

   Run a security review of the current branch's diff against origin/main.
   Check for: injection, broken authz, secret leakage, unsafe deserialization,
   and known-vulnerable dependencies. Report findings by severity with file:line.
   Scope: $ARGUMENTS

3. 3

   Run it

   Invoke from the Claude Code prompt.

   configCopy

   /security-review lib/auth

You changed the login flow and want a focused security pass.

What to expect: Claude Code runs the stored security prompt against your diff and returns a severity-ranked list of concrete findings with locations, not a generic checklist.

• Keep the command's checklist updated as your threat model evolves.