A powerful new /security-review command that performs automated security analysis of code changes:
Usage:
/security-reviewWhat it does:
- Analyzes all pending changes on the current branch
- Performs comprehensive security-focused code review
- Identifies potential vulnerabilities including:
- SQL/Command injection
- Authentication & authorization flaws
- Cross-site scripting (XSS)
- Cryptographic weaknesses
- Sensitive data exposure
- Insecure deserialization
Output: Generates a detailed markdown report with severity levels (HIGH/MEDIUM/LOW), file locations, exploit scenarios, and specific fix recommendations.