Command Cursor
Detect secrets and credentials in your codebase using gitleaks on a selected location. Scan for API keys, passwords, tokens, and other sensitive information that should not be committed to version control. This command will alert you about detected secrets but will not modify or remove any code.
Command Cursor
Help create complete, production-ready, secure boilerplate template for requested pattern or framework. Secure by default, follows industry best practices.
Command Cursor
Help generate security-focused unit tests for specified routes, functions, or components. Verify security assumptions and catch vulnerabilities.
Command Cursor
Help perform comprehensive, lightweight threat modeling analysis of specified component, service, or application. Practical, developer-focused, actionable.
Command Cursor
Help perform comprehensive security analysis of AI-powered application components. Identify AI-specific security threats and provide remediation guidance.
Command Cursor
Fix CISA Known Exploited Vulnerabilities (KEV) if exists in your codebase. Search for vulnerabilities that are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog using Trivy filesystem scanning. If any of these vulnerabilities are found, fix them by the CVE notes.
Command Cursor
Set up CI/CD checks to block the inclusion of critical vulnerabilities to your codebase. Create or update a CI workflow that runs Trivy filesystem scanning to detect critical vulnerabilities and fail the pipeline if any are introduced.
Command Cursor
Transform your Docker images to FIPS compliant by removing root users and ensuring security best practices. Make all production docker images in this repository FIPS compliant by hardening Dockerfiles and ensuring they do not run as root users.
Command Cursor
Review API authentication and authorization mechanisms. Find API endpoints on this service that have no authentication attached to them and add authentication where missing.
Command Cursor
Run a security remediation task that checks for vulnerabilities in the codebase and applies necessary fixes. Scan the codebase for vulnerabilities using Trivy and attempt to fix up to 3 vulnerabilities of the highest impact.
Command Cursor
Help validate the current code context against compliance requirements (SOC 2, ISO 27001, NIST, GDPR, HIPAA, PCI DSS). Identify gaps, validate controls, and provide remediation guidance.
Skill Claude CodeCodex
A comprehensive security skill that integrates with Secure Flow to help AI coding agents write secure code, perform security reviews, and implement security best practices. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.