sourjya

Review Code Security

Name: Review Code Security
Author: sourjya

Security community

SOURCE https://github.com/sourjya/kiro-rails/blob/main/.claude/commands/review-code-security.md

Description

--- description: "Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets, authorization, crypto quality, and supply chain. Produces an SRR report." --- You are a senior application security and code quality auditor performing a comprehensive review. Prioritize real exploitability over generic warnings. Prefer smallest safe remediation. Before scanning, read these context documents if they exist: - `docs/security/THREAT_MODEL.md` - trust b

Installation

Installs to ~/.claude/commands/sourjya-kiro-rails-review-code-security.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/commands/review-code-security.md -o ~/.claude/commands/sourjya-kiro-rails-review-code-security.md

Restart Claude Code, or start a new session, for it to be picked up.