**TL;DR**: `/security-review` - Security-focused analysis covering OWASP Top 10, secrets, and dependencies.

---

## Usage

```bash
/security-review            # Full security analysis
/security-review --secrets  # Secret scanning only
/security-review --deps     # Dependency audit only
/security-review --owasp    # OWASP Top 10 check
```

## What Gets Checked

### OWASP Top 10

| Category | Check |
|----------|-------|
| A01: Broken Access Control | Auth/authz verification |
| A02: Cryptographic Failures | Encryption, hashing |
| A03: Injection | SQL, NoSQL, command |
| A04: Insecure Design | Threat modeling |
| A05: Security Misconfiguration | Headers, defaults |
| A06: Vulnerable Components | Dependency scan |
| A07: Auth Failures | Session, credentials |
| A08: Software Integrity | Deserialization |
| A09: Logging Failures | Audit trails |
| A10: SSRF | URL validation |

### Secret Scanning

Detects patterns like:
- AWS keys: `AKIA[0-9A-Z]{16}`
- GitHub tokens: `ghp_[a-zA-Z0-9]{36}`
- Private keys: `-----BEGIN RSA PRIVATE KEY-----`
- Generic secrets: `password|secret|key|token`

### Dependency Audit

```bash
# Python
pip-audit
safety check

# JavaScript
npm audit
```

## Example Output

```markdown
## Security Review Summary

| Severity | Count |
|----------|-------|
| CRITICAL | 1 |
| HIGH | 2 |
| MEDIUM | 3 |

### CRITICAL: SQL Injection
**File:** src/api/search.py:45
**CWE:** CWE-89
**OWASP:** A03:2021

**Vulnerable:**
```python
cursor.execute(f"SELECT * FROM users WHERE name = '{name}'")
```

**Fixed:**
```python
cursor.execute("SELECT * FROM users WHERE name = ?", (name,))
```
```

## Integration

This command invokes the **Security Reviewer Agent** which:
- Checks all OWASP categories
- Scans for secrets in code
- Audits dependencies for CVEs
- Provides remediation guidance
