claude-security agents

akirtok/preflight-security-audit

Agent

Part of preflight-security-audit

Runs Track 3 (AI/LLM security) of the Preflight Security Audit — prompt injection (direct + indirect), LLM output handling, sensitive-info disclosure, excessive agency/tool permissions, and AI supply chain. Applies when the product calls an LLM or ships an AI feature. Context: The /audit command detected an AI SDK in…

akirtok/preflight-security-audit

Agent

Part of preflight-security-audit

Runs Track 6 (verification & false-positive filter) of the Preflight Security Audit. Re-checks every raw finding against the code, rejects unprovable ones, merges duplicates, and recalibrates severity before the report is assembled. Always run last. Context: The /audit command has collected raw findings from all track…

akirtok/preflight-security-audit

Agent

Part of preflight-security-audit

Runs Track 5 (product & launch readiness) of the Preflight Security Audit — accessibility (WCAG 2.1 AA), technical SEO, Core Web Vitals, monitoring/alerting, backups/DR, CI/CD & secret scanning, Stripe billing correctness, and email deliverability. Context: The /audit command is fanning out the audit tracks. user…