docs: add next security prompts and agents overview

[keito4]

Summary by CodeRabbit

• Documentation
  • Added comprehensive Next.js security audit workflows covering dependency scanning, configuration review, and authorization checks.
  • Included security checklists, reporting templates, and actionable remediation guidance.
  • Added AI Agents overview for cooperative tooling and task workflows.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

This pull request adds five new security-focused documentation files to the .codex/prompts directory and introduces an agents overview document. The security files define standardized workflows for scanning Next.js dependencies, auditing configurations, and reviewing authorization flows, while the agents document outlines cooperative AI agent usage patterns.

Changes

Cohort / File(s)	Summary
Next.js Security Prompt Files .codex/prompts/next-security-check.md, .codex/prompts/next-security:deps-scan.md, .codex/prompts/next-security:config-audit.md, .codex/prompts/next-security:authz-review.md	Four new markdown documentation files establishing standardized security audit workflows: centralized check workflow with execution flow and checklist; dependency vulnerability scanning with npm audit and outdated package checks; static configuration audit covering headers, CSP, middleware, and env exposure; and authorization review for role/permission enforcement across middleware, API routes, and server actions. Each includes objectives, execution steps, expected outputs, and report templates.
Documentation Index .codex/prompts/README.md	Updated with three new sections referencing the added security documentation modules (next-security:deps-scan, next-security:config-audit, next-security:authz-review).
Agents Overview agents.md	New document describing cooperative Claude and Codex agent usage, including repository structure, agent categories, command integration, and workflow guidelines for task classification and reporting.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

• These are predominantly documentation and template files with consistent structure and homogeneous patterns across security workflows
• No code logic or runtime behavior changes to validate
• Review should focus on procedural accuracy, clarity of security guidance, and template completeness within each audit type

Possibly related PRs

• chore: mirror claude configuration to codex #116: Directly related as it establishes or mirrors the .codex/prompts directory structure and README.md framework that this PR extends with new security documentation modules.

Poem

🐰 With whiskers twitched and paws aglow,
Our security docs now steal the show—
Deps scanned, configs checked, authz reviewed,
Next.js safeguards? Completely secured!
Agents cooperate, templates align,
Security prompts: now perfectly fine! ✨

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feat-next-security

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between b8f1dfc and f7c1e36.

📒 Files selected for processing (6)

• .codex/prompts/README.md (1 hunks)
• .codex/prompts/next-security-check.md (1 hunks)
• .codex/prompts/next-security:authz-review.md (1 hunks)
• .codex/prompts/next-security:config-audit.md (1 hunks)
• .codex/prompts/next-security:deps-scan.md (1 hunks)
• agents.md (1 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}