git:20260708.e42b71f to git:20260911.3a0a7c8

1 added, 1 removed. Audit A to A.

---

name: "security-quick"

description: "Quick security scan (native only, fast)"

---

# Security Quick Scan

Fast security scan using only built-in native scanners. No external tools required.

> **Semantic code review?** For SQL injection, XSS, authorization, and insecure

> credential handling, use Claude Code's native **`/security-review`**. This

> command covers the *deterministic* complement - fast secret and config checks

> with zero dependencies.

## Arguments

- `--json` - Output as JSON

- `--verbose` - Show additional details

## What's Checked

- `.gitignore` coverage for sensitive file patterns

- File permissions on secrets/keys

- High-confidence secret patterns in source code

- `.env` files tracked by git

- Debug flags in production configs

## When to Use

- Before creating a PR (run automatically by `/flow-finish`)

- Quick check during development

- CI environments without external tools

## Run Command

```bash

- PYTHONPATH="${HOME}/Projects/claude-power-pack/lib" python3 -m lib.security quick

+ PYTHONPATH="${HOME}/Projects/claude-power-pack" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.security quick

```