security-audit

---
name: security-audit
description: "Comprehensive security review to identify and fix vulnerabilities in the codebase; keywords: security, review, fix. Use only on explicit request; before execution, review diffs and list impact scope."
---

# Security Audit

## Overview

Comprehensive security review to identify and fix vulnerabilities in the
codebase.

## Steps

1. **Dependency audit**
    - Check for known vulnerabilities
    - Update outdated packages
    - Review third-party dependencies
2. **Code security review**
    - Check for common vulnerabilities
    - Review authentication/authorization
    - Audit data handling practices
3. **Infrastructure security**
    - Review environment variables
    - Check access controls
    - Audit network security

## Security Checklist

- [ ] Dependencies updated and secure
- [ ] No hardcoded secrets
- [ ] Input validation implemented
- [ ] Authentication secure
- [ ] Authorization properly configured