Claude code has security plugin which can check code and it's free!

/security-review - built in command, no need for install. Run it on current branch

security-guidance plugin
/plugin install security-guidance@claude-plugins-official