git:20260708.e42b71f to git:20260911.3a0a7c8

1 added, 1 removed. Audit A to A.

---

name: "security-deep"

description: "Deep security scan (includes git history)"

---

# Security Deep Scan

Thorough security scan including git history analysis. Runs all native and external scanners.

> **Semantic code review?** For code-logic vulnerabilities (SQL injection, XSS,

> authorization, insecure credential handling), use Claude Code's native

> **`/security-review`**. This command is the *deterministic* complement - its

> distinctive value is **git-history secret scanning**, which native review

> does not perform.

## Arguments

- `--json` - Output as JSON

- `--verbose` - Show additional details

## What's Checked

Everything from `/security-scan` plus:

- **Git history scanning** via gitleaks (if installed)

- Secrets that may have been committed and later removed

## Important

If secrets are found in git history:

- The secret is **compromised** regardless of current file state

- **Rotate the credential immediately**

- Consider using `git filter-repo` to clean history (advanced)

- Never auto-fix git history - too dangerous for novices

## Run Command

```bash

- PYTHONPATH="${HOME}/Projects/claude-power-pack/lib" python3 -m lib.security deep

+ PYTHONPATH="${HOME}/Projects/claude-power-pack" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.security deep

```