source-command-security git:20260812.34020a0A

Immutable. This exact content never changes and is served at /api/v1/blob/de6be8367def3b53.

---
name: "source-command-security"
description: "Run security scans and vulnerability checks"
---

# source-command-security

Use this skill when the user asks to run the migrated source command `security`.

## Command Template

Run comprehensive security scans on the project.

Execute the following security checks:

1. Bandit security linter: `bandit -r src/ -ll`
2. Safety dependency vulnerability check: `safety check`
3. Check for secrets in code: `detect-secrets scan --baseline .secrets.baseline`
4. Review .env.example to ensure no credentials are exposed

Report back with:

- Any security vulnerabilities found
- Severity levels (LOW, MEDIUM, HIGH, CRITICAL)
- Recommended remediation steps
- Dependencies that need updating
- Overall security posture assessment