LegendaryTeam_For_Claude: Command for Claude Code

Security Scan

Run comprehensive security vulnerability scans and report findings to @chief.

---

What This Command Does

Automatically runs security scans across multiple layers:

1. Dependency vulnerabilities - Known CVEs in packages
2. Code vulnerabilities - Static analysis for security issues
3. Secrets detection - Exposed API keys, passwords, tokens
4. Container security - Docker image vulnerabilities (if applicable)
5. License compliance - Check for restrictive licenses
6. Security headers - HTTP security header validation (if web app)

Then reports all findings to @SecurityAgent and @chief for review.

---

Usage

/security-scan

Optional flags:

/security-scan --fix              # Auto-fix vulnerabilities where safe
/security-scan --dependencies-only # Only scan packages
/security-scan --secrets-only      # Only check for exposed secrets
/security-scan --severity=high     # Only show high/critical issues
/security-scan --json              # Output JSON for CI/CD

---

Implementation

This command auto-detects your project and runs appropriate security tools.

Auto-Detection & Tool Selection

Node.js/JavaScript Projects:

if [ -f "package.json" ]; then
  # npm audit (built-in)
  npm audit --json > npm-audit.json

  # Snyk (if installed)
  if command -v snyk &> /dev/null; then
    snyk test --json > snyk-results.json
  fi

  # retire.js for outdated libraries
  if command -v retire &> /dev/null; then
    retire --json > retire-results.json
  fi
fi

Python Projects:

if [ -f "requirements.txt" ] || [ -f "Pipfile" ] || [ -f "pyproject.toml" ]; then
  # safety for known vulnerabilities
  if command -v safety &> /dev/null; then
    safety check --json > safety-results.json
  fi

  # bandit for code security issues
  if command -v bandit &> /dev/null; then
    bandit -r . -f json -o bandit-results.json
  fi

  # pip-audit
  if command -v pip-audit &> /dev/null; then
    pip-audit --format json > pip-audit.json
  fi
fi