Update the security review command to identify Dependency Issues #31
Description
Hi Team,
The announcement blog post mentions that the security review can detect the following bug classes:
- SQL injection risks
- Cross-site scripting (XSS) vulnerabilities
- Authentication and authorization flaws
- Insecure data handling
- Dependency vulnerabilities
The prompt here has no mentions of dependency vulnerabilities and the /security-review command doesn't seem to detect (rightly so) any 3rd party issues for me. Is there plans on updating the prompt? or Is the expectation for us to modify this per project?