Ctrl+Z Therapy
CasesQuick answersGuides10-minute checklistHow we testCartoonSend it in

Before you ship AI code: Claude Code's /code-review and /security-review

Ship ItChecked against the official source

Source checked 19 Oct 2026 · Published 23 Oct 2026 · Last reviewed 23 Oct 2026 · By Ctrl+Z Therapy (how we test)

The short answer

Claude Code has two review commands built in. /code-review checks your current changes (the diff) for correctness bugs, and can apply the findings with --fix. /security-review analyzes the changes on your current branch for security vulnerabilities, identifying risks like injection, auth issues, and data exposure. In a post on October 15, 2026, the Claude Code team recommends running both locally.

What to do

  1. In Claude Code, type /code-review to check your current changes for correctness bugs.
  2. Add --fix if you want Claude to apply what it finds.
  3. Then type /security-review. It needs an origin remote, like a GitHub repo, because it reviews the difference between your branch and origin's default branch.
  4. Run both before you publish.

Source

Checked on 19 Oct 2026. Prices, limits and settings change, so check the source before you rely on them.