/review-security
Perform comprehensive security audit using code-review-agent and security-production-agent. Scan for OWASP Top 10 vulnerabilities: SQL injection, XSS, CSRF, insecure authentication, broken access control, security misconfiguration, sensitive data exposure, insufficient logging,
$ npx -y skills add LarouexNonprofitConsulting/larouex-fullstack-plugin --agent claude-codeShips with larouex-fullstack-builder. Installing the plugin gets this command.
How it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/review-security
Context preview
What this command does when you run it.
Perform comprehensive security audit using code-review-agent and security-production-agent. Scan for OWASP Top 10 vulnerabilities: SQL injection, XSS, CSRF, insecure authentication, broken access control, security misconfiguration, sensitive data exposure, insufficient logging,
Command definition
review-security.mdPerform comprehensive security audit using code-review-agent and security-production-agent. Scan for OWASP Top 10 vulnerabilities: SQL injection, XSS, CSRF, insecure authentication, broken access control, security misconfiguration, sensitive data exposure, insufficient logging, insecure deserialization, and vulnerable dependencies. Check environment variable handling, API key exposure, HTTPS enforcement, security headers (CSP, HSTS, X-Frame-Options), input validation, output encoding, rate limiting, session management, and file upload restrictions. Run npm audit and analyze results. Check Azure/Railway security configurations. Provide prioritized findings with severity ratings, exploitation scenarios, and remediation steps. Include compliance gaps and recommendations for security hardening. Output actionable security improvements with specific code fixes.
A comprehensive Claude Code plugin with 81 commands and 12 specialized AI agents for building modern, full-stack web applications with Next.js 15, Azure, Railway, Bootstrap, and TypeScript.
Repo: LarouexNonprofitConsulting/larouex-fullstack-plugin
Other commands on larouex-fullstack-builder.
- /add-admin-panel
Create basic admin dashboard with protected routes. Implement admin route protection with role-based access control. Create dashboard layout with sidebar navigation using Bootstrap. Add user management table with search and pagination. Implement CRUD operations for users:
Open command - /add-analytics-google
Integrate Google Analytics 4 for comprehensive tracking. Install gtag.js script in application layout. Create analytics wrapper hooks for type-safe event tracking. Implement automatic pageview tracking with Next.js router events. Add custom event tracking for business metrics:
Open command - /add-analytics-plausible
Integrate privacy-friendly Plausible Analytics for cookieless tracking. Add Plausible script to application layout with custom domain if configured. Implement automatic pageview tracking. Create custom event tracking hooks for user interactions. Set up goals in Plausible
Open command - /add-api-azure
Create a new Azure Function HTTP endpoint with full integration.
Open command - /add-api-railway
Create a new Express API endpoint with full integration.
Open command - /add-auth
Implement authentication system with comprehensive user management.
Open command