NeVibeCode · 24 items
Slash commands for Security
Commands for Security: what each one does, an install command and example prompts.
security-hardening command This command runs a staged security review: vulnerability scanning, threat modeling, and architecture checks. Use it when a project needs a documented hardening pass.
CX Codex
437installs
hookify
official command Generates hook rules from recent chat complaints or explicit instructions. It prevents unsafe terminal commands and unwanted edits in Claude Code.
★ 44,635repo stars
modernize-harden
official command Scans a legacy system for vulnerabilities and drafts patches for Critical and High findings. It leaves the source code untouched.
★ 44,635repo stars
modernize-assess
official command Assesses a legacy system for code size, complexity, technical debt, and security risks. Use it before planning a modernization effort for one system or a portfolio.
★ 44,635repo stars
security-audit command Runs a structured security review on your codebase, dependencies, and configuration. Handy before shipping to production or during code audits.
1,485installs
supabase-security-audit command A slash command that audits a Supabase project: RLS policies, role permissions, API keys and auth configuration, with a report at the end.
1,020installs
setup-docker-containers command Sets up Docker for development and production projects, covering multi-stage builds, Compose environments, and container workflows.
740installs
dependency-audit command Audits project dependencies for known CVEs, license compliance issues, and outdated packages across multiple ecosystems.
658installs
secrets-scanner command Finds exposed API keys, passwords, certificates, and other sensitive data in a repository. Choose a scan focus or run a broader check.
612installs
pr-review command This command reviews a pull request from six perspectives, spanning product, engineering, QA, security, DevOps, and UI/UX. It directs the agent to address findings immediately.
562installs
design-rest-api command Designs RESTful API architectures, endpoints, authentication flows, and OpenAPI documentation directly from project code.
559installs
compliance-check command Works out which regulations apply to your product and points at the controls you still need before an audit.
CX Codex
★ 41,729repo stars
approve-review command Opens a window where review actions skip policy checks. Handy when the agent needs to approve a PR or a comment.
CX Codex
★ 41,729repo stars
audit-chain command Checks the Ed25519 signature on every receipt in receipts.jsonl and reports the lines that fail. Useful before a release or a security audit.
CX Codex
★ 41,729repo stars
multi-agent-review command Runs parallel and sequential multi-agent code audits and consolidates findings into a single prioritized report.
CX Codex
★ 41,729repo stars
config-validate command Check application settings against schemas and environment rules, and scan for possible secrets. Useful when reviewing configuration before production.
CX Codex
★ 41,729repo stars
full-review command Run a staged review of code quality and architecture, followed by checks for security, performance, testing, and standards. Use it to review a path or a described part of a project.
CX Codex
★ 41,729repo stars
deps-audit command Audits project dependencies for vulnerabilities, stale packages, license conflicts, and supply chain risks. Use it when you need a remediation-focused dependency review.
CX Codex
★ 41,729repo stars
block-no-verify command Configures a PreToolUse hook in Claude Code to stop AI agents from bypassing git hooks with --no-verify and similar flags.
CX Codex
★ 41,729repo stars
team-spawn command Spawns multi-agent teams using presets or custom setups for parallel code review and debugging.
CX Codex
★ 41,729repo stars
penetration-test command A slash command that runs penetration testing on a web app, API or auth flow and returns a report with fixes.
434installs
zoom-integration-doctor
official command Runs a read-first diagnostic pass over Zoom integration code and reports architecture, auth, eventing and SDK risks by severity. Useful before you touch an unfamiliar repo.
CX Codex GP ChatGPT
★ 7,596repo stars
setup-zoom-oauth
official command A command that reads your repository and wires up a correct Zoom OAuth flow: app type, scopes, redirects and token lifecycle.
CX Codex GP ChatGPT
★ 7,596repo stars
setup-rate-limiting command A slash command that inspects your project and builds a rate limiting setup: algorithms, per-user quotas, counter storage.
247installs
