Security Review

The /security-review command lets you run security analysis directly from your terminal before committing code.

What can security review detect?

SQL injection risks — identifies potential database query vulnerabilities.
Cross-site scripting (XSS) — detects client-side script injection vulnerabilities.
Authentication and authorization flaws — finds issues with access control.
Insecure data handling — identifies problems with data validation and sanitization.
Dependency vulnerabilities — checks for known issues in third-party packages.

Security-review can be integrated into GitHub Actions so a security scan runs automatically for submitted PRs.