pumpd-security-scan

Weekly PUMPD security and privacy scan that drives the claude-security plugin over the week's preview-branch diff of the monorepo, layers PUMPD-specific RLS, storage, and AI-coach budget checks, rotates a monthly deep scan across one focus area, and files capped findings to Linear Triage. Use when a scheduled pumpd-security-scan run fires, when asked to run the security scan or a security review of the week's preview changes, or when asked to set pumpd-security-scan up as a recurring task. Supports a dry-run argument that prints findings without filing them.