@claudeai: We just shipped automated secu...

We just shipped automated security reviews in Claude Code. Catch vulnerabilities before they ship with two new features:

- /security-review slash command for ad-hoc security reviews
- GitHub Actions integration for automatic reviews on every PR

The /security-review command runs security analysis directly from your terminal.

Claude checks for vulnerabilities like:
- SQL injection risks
- XSS vulnerabilities
- Insecure data handling

Found a vulnerability? Simply ask Claude to fix it.

Our new GitHub action is a friendly security reviewer for all your PRs.

When configured, the integration checks every new PR for vulnerabilities, posting inline comments with explanations and recommended fixes.

We’re using this ourselves at @AnthropicAI. It's already caught real vulnerabilities, including a potential remote code execution vulnerability in an internal tool.

With the GitHub action, we were able to fix it before it made it to production.

Getting started:

For the /security-review command, simply update Claude Code and run the command.

For the GitHub action, view our docs to get started: github.com/anthropics/cla…