security-deep git:20260911.3a0a7c8A

Immutable. This exact content is served forever at /api/v1/blob/addce83eda56fb9d.

---
name: "security-deep"
description: "Deep security scan (includes git history)"
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/security/deep.md instead -->

# Security Deep Scan

Thorough security scan including git history analysis. Runs all native and external scanners.

> **Semantic code review?** For code-logic vulnerabilities (SQL injection, XSS,
> authorization, insecure credential handling), use Claude Code's native
> **`/security-review`**. This command is the *deterministic* complement - its
> distinctive value is **git-history secret scanning**, which native review
> does not perform.

## Arguments

- `--json` - Output as JSON
- `--verbose` - Show additional details

## What's Checked

Everything from `/security-scan` plus:
- **Git history scanning** via gitleaks (if installed)
- Secrets that may have been committed and later removed

## Important

If secrets are found in git history:
- The secret is **compromised** regardless of current file state
- **Rotate the credential immediately**
- Consider using `git filter-repo` to clean history (advanced)
- Never auto-fix git history - too dangerous for novices

## Run Command

```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.security deep
```