| name | secreview |
| description | Quick security review of a file, component, or change. Runs input validation audit, crypto review, dependency scan, secret detection, and access control checks. |
| argument-hint | [file, component, or description] |
| user_invocable | true |
| tools | Read, Glob, Grep, WebSearch |
/secreview — Quick Security Review
Run a focused SecOps review of the current change.
Process
As the SecOps agent, perform:
- Input Validation Audit: Check all trust boundaries for proper sanitization
- Crypto Review: Verify algorithm choices, key management, certificate handling
- Dependency Scan: Check for known CVEs in any new or updated dependencies
- Secret Detection: Scan for hardcoded credentials, keys, tokens
- Access Control: Verify authorization checks are present and correct
Target
$ARGUMENTS
Output
# Security Review: [Subject]
**Risk Level**: CRITICAL / HIGH / MEDIUM / LOW
**Blocking Issues**: [count]
## Findings
[numbered findings with severity, impact, and remediation]
## Approved / Blocked
[decision with conditions if applicable]
