# Slash commands for Security Commands for Security: what each one does, an install command and example prompts. 24 cards - HTML: https://affpapa.org/en/nevibecode/commands/topic/security - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [security-hardening](https://affpapa.org/en/nevibecode/commands/security-hardening.md) — command · Seth Hobson · Claude Code, Codex, Cursor · 437 installs — This command runs a staged security review: vulnerability scanning, threat modeling, and architecture checks. - [hookify](https://affpapa.org/en/nevibecode/commands/hookify.md) — command (official Anthropic) · Anthropic · Claude Code · ★ 44635 — Generates hook rules from recent chat complaints or explicit instructions. - [modernize-harden](https://affpapa.org/en/nevibecode/commands/modernize-harden.md) — command (official Anthropic) · Anthropic · Claude Code · ★ 44635 — Scans a legacy system for vulnerabilities and drafts patches for Critical and High findings. - [modernize-assess](https://affpapa.org/en/nevibecode/commands/modernize-assess.md) — command (official Anthropic) · Anthropic · Claude Code · ★ 44635 — Assesses a legacy system for code size, complexity, technical debt, and security risks. - [security-audit](https://affpapa.org/en/nevibecode/commands/security-audit.md) — command · davila7 · Claude Code · 1485 installs — Runs a structured security review on your codebase, dependencies, and configuration. - [supabase-security-audit](https://affpapa.org/en/nevibecode/commands/supabase-security-audit.md) — command · davila7 · Claude Code · 1020 installs — A slash command that audits a Supabase project: RLS policies, role permissions, API keys and auth configuration, with a report at the end. - [setup-docker-containers](https://affpapa.org/en/nevibecode/commands/setup-docker-containers.md) — command · davila7 · Claude Code · 740 installs — Sets up Docker for development and production projects, covering multi-stage builds, Compose environments, and container workflows. - [dependency-audit](https://affpapa.org/en/nevibecode/commands/dependency-audit.md) — command · davila7 · Claude Code · 658 installs — Audits project dependencies for known CVEs, license compliance issues, and outdated packages across multiple ecosystems. - [secrets-scanner](https://affpapa.org/en/nevibecode/commands/secrets-scanner.md) — command · davila7 · Claude Code · 612 installs — Finds exposed API keys, passwords, certificates, and other sensitive data in a repository. - [pr-review](https://affpapa.org/en/nevibecode/commands/pr-review.md) — command · davila7 · Claude Code · 562 installs — This command reviews a pull request from six perspectives, spanning product, engineering, QA, security, DevOps, and UI/UX. - [design-rest-api](https://affpapa.org/en/nevibecode/commands/design-rest-api.md) — command · davila7 · Claude Code · 559 installs — Designs RESTful API architectures, endpoints, authentication flows, and OpenAPI documentation directly from project code. - [compliance-check](https://affpapa.org/en/nevibecode/commands/compliance-check.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Works out which regulations apply to your product and points at the controls you still need before an audit. - [approve-review](https://affpapa.org/en/nevibecode/commands/approve-review.md) — command · Tom Farley · Claude Code, Codex, Cursor · ★ 41729 — Opens a window where review actions skip policy checks. - [audit-chain](https://affpapa.org/en/nevibecode/commands/audit-chain.md) — command · Tom Farley · Claude Code, Codex, Cursor · ★ 41729 — Checks the Ed25519 signature on every receipt in receipts.jsonl and reports the lines that fail. - [multi-agent-review](https://affpapa.org/en/nevibecode/commands/multi-agent-review.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Runs parallel and sequential multi-agent code audits and consolidates findings into a single prioritized report. - [config-validate](https://affpapa.org/en/nevibecode/commands/config-validate.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Check application settings against schemas and environment rules, and scan for possible secrets. - [full-review](https://affpapa.org/en/nevibecode/commands/full-review.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Run a staged review of code quality and architecture, followed by checks for security, performance, testing, and standards. - [deps-audit](https://affpapa.org/en/nevibecode/commands/deps-audit.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Audits project dependencies for vulnerabilities, stale packages, license conflicts, and supply chain risks. - [block-no-verify](https://affpapa.org/en/nevibecode/commands/block-no-verify.md) — command · cskwork · Claude Code, Codex, Cursor · ★ 41729 — Configures a PreToolUse hook in Claude Code to stop AI agents from bypassing git hooks with --no-verify and similar flags. - [team-spawn](https://affpapa.org/en/nevibecode/commands/team-spawn.md) — command · Seth Hobson · Claude Code, Codex, Cursor · ★ 41729 — Spawns multi-agent teams using presets or custom setups for parallel code review and debugging. - [penetration-test](https://affpapa.org/en/nevibecode/commands/penetration-test.md) — command · davila7 · Claude Code · 434 installs — A slash command that runs penetration testing on a web app, API or auth flow and returns a report with fixes. - [zoom-integration-doctor](https://affpapa.org/en/nevibecode/commands/zoom-integration-doctor.md) — command (official OpenAI) · Zoom · Codex, ChatGPT · ★ 7596 — Runs a read-first diagnostic pass over Zoom integration code and reports architecture, auth, eventing and SDK risks by severity. - [setup-zoom-oauth](https://affpapa.org/en/nevibecode/commands/setup-zoom-oauth.md) — command (official OpenAI) · Zoom · Codex, ChatGPT · ★ 7596 — A command that reads your repository and wires up a correct Zoom OAuth flow: app type, scopes, redirects and token lifecycle. - [setup-rate-limiting](https://affpapa.org/en/nevibecode/commands/setup-rate-limiting.md) — command · davila7 · Claude Code · 247 installs — A slash command that inspects your project and builds a rate limiting setup: algorithms, per-user quotas, counter storage. ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [bash](https://affpapa.org/en/nevibecode/tag/bash.md) · [npm](https://affpapa.org/en/nevibecode/tag/npm.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [architecture](https://affpapa.org/en/nevibecode/tag/architecture.md) · [cargo](https://affpapa.org/en/nevibecode/tag/cargo.md) · [ci-cd](https://affpapa.org/en/nevibecode/tag/ci-cd.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [containers](https://affpapa.org/en/nevibecode/tag/containers.md) · [database](https://affpapa.org/en/nevibecode/tag/database.md) · [debugging](https://affpapa.org/en/nevibecode/tag/debugging.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md