security-scan

name	security-scan
description	Run full security scans on the codebase using Ruflo security tools
allowed-tools	Bash(npx *) mcp__claude-flow__memory_store mcp__claude-flow__hooks_post-task Read Grep
argument-hint	[depth: quick|standard|full]

Run a security scan at the specified depth.

Via CLI:

npx @claude-flow/cli@latest security scan --depth DEPTH
npx @claude-flow/cli@latest security cve --check
npx @claude-flow/cli@latest security report --format markdown

Depth	Checks
quick	Dependencies, known CVEs
standard	+ Input validation, path traversal, secrets
full	+ Threat modeling, injection vectors, auth flows

Store findings via MCP: mcp__claude-flow__memory_store({ key: "scan-findings", value: "SUMMARY", namespace: "security" })

Train patterns: mcp__claude-flow__hooks_post-task({ taskId: "security-scan", success: true, storeResults: true })