diff --git a/src/commands.ts b/src/commands.ts index d7ab5b945..52bf753d0 100644 --- a/src/commands.ts +++ b/src/commands.ts @@ -50,7 +50,7 @@ const agentsPlatform = ? require('./commands/agents-platform/index.js').default : null /* eslint-enable @typescript-eslint/no-require-imports */ -import securityReview from './commands/security-review.js' + import bughunter from './commands/bughunter/index.js' import terminalSetup from './commands/terminalSetup/index.js' import usage from './commands/usage/index.js' @@ -341,7 +341,6 @@ const COMMANDS = memoize((): Command[] => [ review, ultrareview, rewind, - securityReview, terminalSetup, upgrade, extraUsage, diff --git a/src/costrict/skill/codeReviewSecurity.ts b/src/costrict/skill/codeReviewSecurity.ts index f69444afc..d5c98552f 100644 --- a/src/costrict/skill/codeReviewSecurity.ts +++ b/src/costrict/skill/codeReviewSecurity.ts @@ -6,10 +6,10 @@ export function registerCodeReviewSecuritySkill(): void { const skillMd = files['SKILL.md'] ?? '' registerBundledSkill({ - name: 'strict-security-review', - description: 'Systematic code security audit — identifies vulnerabilities like SQL injection, XSS, command injection, SSRF, etc.', + name: 'security-review', + description: 'CoStrict Security — identifies code vulnerabilities including SQL injection, XSS, command injection, SSRF, path traversal, deserialization, and business logic flaws', whenToUse: - 'Use when the user requests a code audit, security audit, or vulnerability scan; or mentions /code-review-security, /audit, or wants a security check before deployment', + 'Use when the user requests a code audit, security audit, vulnerability scan, or wants to review vulnerabilities before deployment. Also triggers on /security-review.', userInvocable: true, files, async getPromptForCommand() {