Security agents

1,933 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 196LLM 115cybersecurity 100agents 94devsecops 86ai-coding 85ai-security 84cli 77pentesting 72Multi-Agent 66agentic-ai 66agentic-coding 66DAST 63application-security 62

access-control

01

PostHog/posthog

Agent Claude Code

PostHog access control system implementation expert - use when adding access controls to new products, debugging access control issues, or questions about RBAC patterns.

not rated 40k +94 changed 1mo ago A 32 tokens

reviewer

02

can1357/oh-my-pi

Agent Claude Code

Code review specialist for quality/security analysis.

not rated 36k +763 changed 25d ago A 10 tokens original MIT

OWASP/CheatSheetSeries

Agent Claude Code

Duplication and placement reviewer for OWASP cheat sheet changes. Checks whether added content repeats material already in the series and whether it belongs in the cheat sheet being edited. Invoked by /review-cheatsheet-pr.

not rated 34k +74 yesterday A 52 tokens CC-BY-SA-4.0

gadievron/raptor

Agent Claude Code

Multi-stage pipeline to validate vulnerability findings are real, reachable, and exploitable.

not rated 3.9k +32 changed 22d ago A 21 tokens

security-auditor

05

iannuttall/claude-agents

Agent Claude Code

Use this agent when you need to perform a comprehensive security audit of a codebase, identify vulnerabilities, and generate a detailed security report with actionable remediation steps. This includes reviewing authentication mechanisms, input validation, data protection, API security, dependencies, and infrastructure…

not rated 2.0k +1 1y ago A 345 tokens original MIT archived

security-reviewer

06

rohitg00/skillkit

Agent Claude Code

Security vulnerability detection and remediation specialist. OWASP Top 10, secrets, injection.

not rated 1.6k +8 4mo ago A 20 tokens original Apache-2.0

code-review

07

GWUDCAP/cc-sessions

Agent Claude Code

Use ONLY when explicitly requested by user or when invoked by a protocol in sessions/protocols/. DO NOT use proactively. Reviews code for security vulnerabilities, bugs, performance issues, and adherence to project patterns during context compaction or pre-commit reviews. When using this agent, you must provide files…

not rated 1.5k +1 10mo ago A 92 tokens original MIT

security

09

open-gsd/gsd-pi

Agent Claude Code

OWASP security audit, dependency risks, and secrets detection.

not rated 1.3k +16 today A 13 tokens original MIT

drupal

11

ASCIT31/Dark-Moon

Agent Claude Code

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Drupal applications (core, contrib modules, JSON:API, REST, Entity/Field system, Render API, Twig, Views, Drupal Commerce, roles/permissions).

not rated 1.0k +15 15d ago A 49 tokens GPL-3.0

ssti-hunter

12

H-mmer/pentest-agents

Agent Claude Code

Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse…

not rated 1.0k +17 4mo ago A 83 tokens

access-control

13

PostHog/posthog-foss

Agent Claude Code

PostHog access control system implementation expert - use when adding access controls to new products, debugging access control issues, or questions about RBAC patterns.

not rated 723 +2 changed 1mo ago A 32 tokens original MIT

c2-evasion-agent

14

SeaOf0/dsh-redteam-model

Agent Claude Code needs its repo

C2 framework evasion specialist. Analyzes C2 source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES C2 source code to evade detection.

not rated 711 +33 2d ago A 47 tokens original MIT

security-agent

15

alinaqi/maggy

Agent Claude Code

Performs security analysis on completed features - OWASP scanning, secrets detection, dependency audit. Blocks on Critical/High.

not rated 708 +1 2d ago A 27 tokens original MIT

lateral-thinker

16

samvallad33/vestige

Agent Claude Code

Subconscious subagent that surfaces cross-disciplinary structural parallels from the Vestige memory graph. Invoked by the preflight-swarm.sh UserPromptSubmit hook (Pre-Cognitive Triad v2.3 "Thalamus"). Fresh context, Haiku 4.5, Vestige MCP tool access. Outputs a single XML block or EMPTY.

not rated 650 +2 4d ago A 82 tokens AGPL-3.0

c-safety-reviewer

17

ZacheryGlass/.claude

Agent Claude Code

Use this agent when C source files (.c, .h) have been created or modified, especially code involving memory allocation, file descriptors, sockets, cryptographic operations, credential handling, or external input parsing. Should be triggered on every code change to C files to catch resource lifecycle bugs and security…

not rated 598 +1 3mo ago A 492 tokens

code-reviewer

18

me2resh/apexyard

Agent Claude Code

Expert code review specialist. Reviews PRs for quality, security, and standards compliance. Use proactively after code changes or when a PR needs review.

not rated 528 +7 changed today A 33 tokens original MIT

reviewer

19

duckbugio/flock

Agent Claude Code

Read-only adversarial reviewer. Pre-PR it returns a verdict for the arbiter; on an open PR it posts true line-anchored INLINE comments via the git-host API, written in the PR's own language. Scores risk and checks cross-service compatibility. Never edits code.

not rated 502 yesterday A 60 tokens original MIT

Agent Author

20

agentgg-dev/agentgg

Agent Claude Code

Distills a past security report into a reusable agentgg agent that catches the same anti-pattern if it recurs in this codebase.

not rated 444 +5 yesterday A 30 tokens original Apache-2.0

code-reviewer

21

wesammustafa/opencode-primer

Agent Claude CodeOpenCode

Senior code reviewer — reads diffs and surfaces bugs, security issues, and maintainability problems without modifying files.

not rated 402 +3 3mo ago A 22 tokens original MIT

security-reviewer

22

brianlovin/agent-config

Agent Claude Code

Reviews code for security issues including injection vulnerabilities, auth flaws, and secrets in code.

not rated 377 6mo ago A 21 tokens

kousen/claude-code-training

Agent Claude Code

Use this agent when you need to verify that your project's dependencies are being used according to their official recommendations and best practices. This includes checking for deprecated patterns, security vulnerabilities, outdated usage patterns, and ensuring alignment with the latest documentation from each…

not rated 348 +3 2d ago A 0 tokens original MIT

PlamenTSV/plamen

Agent Claude Code

L1 mode - deep analysis of consensus safety/liveness invariants, non-determinism sources, Byzantine-scenario reasoning, and cross-client state divergence.

not rated 306 +3 19d ago A 36 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: