---

name: security-audit description: "Comprehensive security audit of codebase using multiple security-auditor agents. Use before production deployments or after major features." model: claude-sonnet-4-20250514 allowed-tools: Read, Write, Glob, Grep, Task

/security-audit

Multi-agent security audit with findings saved to timestamped report.

Usage

Copy/security-audit yourbench           # Full security review
/security-audit coordinatr          # Audit specific project

Audit Dimensions

Five security-auditor agents run in parallel:

OWASP Top 10 Coverage

Execution Flow

1. Validate Project

Copyls spaces/[project]/

2. Launch Parallel Audits

5 security-auditor agents run concurrently with focused prompts.

3. Consolidate Findings

Aggregate by:

• Severity: Critical, High, Medium, Low, Info
• Category: OWASP classification
• Location: File path + line number
• Remediation: Specific fix guidance

4. Generate Report

CopyWrite: .claude/temp/security-audit-[project]-[timestamp].md

Report Structure

Copy# Security Audit: [Project Name]
**Date**: YYYY-MM-DD HH:MM:SS

## Executive Summary
- Critical issues: X
- High severity: Y
- Total findings: Z

## Critical Issues
### [Issue Title]
- **Severity**: Critical
- **Category**: SQL Injection (CWE-89)
- **Location**: src/api/users.py:42
- **Description**: [What's wrong]
- **Impact**: [What could happen]
- **Remediation**: [How to fix]

## High Severity Issues
[...]

## Recommendations
- Priority actions
- Long-term improvements

## Scan Coverage
- Files scanned: X
- Technologies: Z

When to Use

• Before production deployments
• After major feature additions
• Monthly security reviews
• Before external security audits
• After dependency updates

Output Location

Copy.claude/temp/security-audit-yourbench-2026-01-08-143022.md

Reports saved to .claude/temp/ (gitignored) for review.

Notes

• Read-only: No code changes made
• Non-blocking: Doesn't prevent commits
• Parallel execution: Agents run concurrently
• False positives possible: Manual review recommended

Integration

CopyImplement security feature → /security-audit → Fix issues → /commit