Agent Claude Code
Independent OWASP security reviewer. Invoke (proactively or on request) to run a security-only pass over a diff, endpoint, or file before it merges. Reports vulnerabilities with file:line, exploit, and fix; never modifies code.
Hook Claude Code
Runs before the agent uses a tool for Write and Edit tool calls, executing secret-scan.sh via bash. From anshajk/claude-security.
Settings file Claude Code
Agent settings declaring 1 hook event (PreToolUse) and 17 allowed tools.
Skill Claude CodeCodex
Black-box hat — test ONLY against the published contract; you may NOT read the implementation.
Skill Claude CodeCodex
Design/DRY hat — review this diff ONLY for architecture, duplication, and maintainability.
Skill Claude CodeCodex
Security hat — review this diff ONLY through a security lens. One vantage, deep, no other concerns.
Skill Claude CodeCodex
Reviews application code for OWASP Top 10 style vulnerabilities (injection, broken access control / IDOR, SSRF, XSS, secrets, insecure deserialization, security misconfiguration). Use when reviewing a diff, an endpoint, or a file for security issues, or whenever the user asks for a security pass, OWASP check, or "is…
Skill Claude CodeCodex
Self-verifying loop — build, test, and lint before presenting any diff, then self-critique.
Skill Claude CodeCodex
Triage a single security finding end to end — confirm real vs. false positive, then remediate or dismiss with a written record.
MCP server Claude CodeCodexCursor
Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.