| name | security-full |
| description | Run a comprehensive security review of the entire repository. |
| model | opus |
| effort | max |
Perform a comprehensive security review of the entire repository. Analyze all source files systematically. Identify real vulnerabilities, not hypothetical or stylistic concerns.
Output Format
For each finding:
### [SEVERITY] Title
- **File:** path/to/file:line
- **Category:** e.g. injection, auth, data exposure, etc.
- **Issue:** what's wrong and why it's exploitable or dangerous
- **Fix:** concrete remediation (code snippet if short, otherwise description)
Severity levels: CRITICAL, HIGH, MEDIUM, LOW, INFO
Rules
- Only report real, actionable security issues.
- Do not report style issues, missing docs, or non-security code quality problems.
- If a finding depends on context you can't determine, note the assumption.
- At the end, provide a one-line summary: total findings by severity.
- If no issues are found, say so clearly.