api-attacker
01Agent
A code-review agent that looks for common security weaknesses in web APIs. An API is a program interface that lets applications exchange data and perform actions.
AI development team as a Claude Code plugin -- TDD workflow, security audit, and phase-boundary compaction.
Agent
A code-review agent that looks for common security weaknesses in web APIs. An API is a program interface that lets applications exchange data and perform actions.
Agent
An automated reviewer for API contracts, the agreed rules for how software services communicate. It checks for breaking changes, naming consistency, error-response structure, versioning, and pagination, using guidance from major API design standards.
Agent
A code-review agent that checks an approved implementation plan against the actual files and an already-created Cycle document, a record of the planned work.
Agent
An agent that turns detected software vulnerabilities into concrete attack scenarios from an attacker's point of view. It can analyze how multiple weaknesses may combine into an attack chain.
Agent
A static-analysis agent for finding authentication and permission security weaknesses in application code. Authentication checks who a user is; authorisation checks what that user may do.
Agent
A review agent for making deployments and database changes safer. A database migration changes the structure or data of a database; a rollback returns software to an earlier version.
Agent
A code review agent that checks program logic, unusual input cases, and error handling.
Agent
A code-scanning agent for finding insecure settings and weak cryptography. It checks for issues such as enabled debugging, outdated hash functions, weak encryption methods, default passwords, and unrestricted cross-origin access.
Agent
A code-scanning agent that looks for Cross-Site Request Forgery, or CSRF, weaknesses. CSRF is an attack where another website tricks a logged-in user's browser into changing data on a different website.
Agent
A browser-based security-testing agent that discovers web application URLs and endpoints, including routes created while the page runs.
Agent
A combined design review that checks whether a proposed software change has a suitable scope, consistent architecture, and acceptable risks.
Agent
A planning agent that proposes user-interface and user-experience guidelines for a feature. It compares Japanese and Western design patterns for a specified audience and interface area, such as a form, dashboard, or landing page.
Agent
An agent that dynamically checks suspected web security problems by sending controlled requests to a running website. It covers SQL injection, cross-site scripting, authentication, request-forgery, server-side request forgery, and file-reading checks.
Agent
A code-scanning agent that looks for unsafe exception handling, such as ignored errors or missing resource cleanup, across Java, Python, JavaScript, PHP, and Ruby code.
Agent
Agent "false-positive-filter-reference" from morodomi/dev-crew, covering false positive filter - reference, input format, @security-ignore format, sanitization patterns by language and output format.
Agent
A filter for static-analysis security findings that marks likely false alarms based on code patterns and surrounding context. Static analysis scans source code for possible security problems without running it.
Agent
A security-scanning agent for file-related vulnerabilities, including path traversal, unsafe file uploads, local file inclusion, and unrestricted file access. These are weaknesses that may let users read, upload, or access files they should not control.
Agent
Agent "green-worker" from morodomi/dev-crew, covering green worker, input, example input, output and context retrieval protocol.
Agent
A code-review agent that examines how a change can affect the rest of a codebase. It checks dependencies, public APIs, single points of failure, and circular dependencies.
Agent
Agent "injection-attacker" from morodomi/dev-crew, covering detection targets, sql injection, command injection, framework detection patterns and dangerous patterns.
Agent
A code-review agent that checks how easy software is to read, understand, and change. It uses Martin Fowler’s “code smells,” which are common patterns that often make code harder to maintain.
Agent
Agent "observability-reviewer" from morodomi/dev-crew, covering focus, output, ブロッキングスコア基準, correctness-reviewer との分担(dedup ルール) and memory.
Agent
A helper agent that detects recurring patterns in an AI coding session and evaluates how reliable those patterns are.
Agent
A code-review agent focused on runtime performance: how efficiently code works, how much memory it uses, and whether concurrent operations are safe. N+1 queries are repeated database or API calls caused by processing items one at a time.