security-quick git:20260911.3a0a7c8A

Immutable. This exact content is served forever at /api/v1/blob/f94da2c703b61cb8.

---
name: "security-quick"
description: "Quick security scan (native only, fast)"
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/security/quick.md instead -->

# Security Quick Scan

Fast security scan using only built-in native scanners. No external tools required.

> **Semantic code review?** For SQL injection, XSS, authorization, and insecure
> credential handling, use Claude Code's native **`/security-review`**. This
> command covers the *deterministic* complement - fast secret and config checks
> with zero dependencies.

## Arguments

- `--json` - Output as JSON
- `--verbose` - Show additional details

## What's Checked

- `.gitignore` coverage for sensitive file patterns
- File permissions on secrets/keys
- High-confidence secret patterns in source code
- `.env` files tracked by git
- Debug flags in production configs

## When to Use

- Before creating a PR (run automatically by `/flow-finish`)
- Quick check during development
- CI environments without external tools

## Run Command

```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.security quick
```