Security Audit

Comprehensive OWASP Top 10 security vulnerability scanning using the security-specialist agent.

Usage

• /audit-security — Full OWASP Top 10 audit (standard depth)
• /audit-security --quick --scope=current-pr — Pre-commit security check
• /audit-security --comprehensive --format=summary — Pre-release deep audit with executive summary
• /audit-security --standard --format=sarif — Security tools integration
• /audit-security xss — Legacy focus area (still supported)

Arguments

Depth Modes

• --quick — OWASP Top 3 only (~5 min): SQL injection, XSS, auth issues
• --standard — OWASP Top 10 (default, ~15 min)
• --comprehensive — OWASP Top 10 + CVE scanning + config review (~30 min)