Security agents

affaan-m/ECC

Agent

Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code. MUST BE USED for all code changes.

google-gemini/gemini-cli

Agent Gemini CLI

General purpose agent for any tasks that need a scoped context window.

earendil-works/pi

Agent

Code review specialist for quality and security analysis.

addyosmani/agent-skills

Agent

Senior code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, and performance. Use for thorough code review before merge.

addyosmani/agent-skills

Agent

Security engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.

paperclipai/paperclip

Agent

Use this template when hiring security engineers who own security posture: threat-model systems, review auth/crypto/input handling, triage supply-chain and LLM-agent risk, and drive concrete remediations.

rtk-ai/rtk

Agent Claude Code

Use this agent when you need comprehensive code quality assurance, security vulnerability detection, or performance optimization analysis. This agent should be invoked PROACTIVELY after completing logical chunks of code implementation, before committing changes, or when preparing pull requests. Examples:\n\n…

abhigyanpatwari/GitNexus

Agent Claude Code

GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing, external input handling, hidden Unicode, YAML/Docker/workflow risks, and suspicious non-ASCII hygiene.

streamlit/streamlit

Agent Claude Code

Review the current branch's changes for code quality, test coverage, security, best practices, and product/API alignment. Use when asked to perform a code review.

ccxt/ccxt

Agent Claude Code

End-to-end review of a CCXT pull request. Reads the diff, transpiles and builds in all six languages (TS/JS, Python, PHP, C#, Go, Java), runs offline tests + live smoke tests, inspects both source and generated code, checks for security/performance/race-condition issues, drafts a structured review (verdict, inline…

wshobson/agents

Agent

Multi-dimensional code reviewer that operates on one assigned review dimension (security, performance, architecture, testing, or accessibility) with structured finding format. Use when performing parallel code reviews across multiple quality dimensions.

Yeachan-Heo/oh-my-claudecode

Agent

Security vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns).

continuedev/continue

Agent

Review dependency changes for security implications and breaking changes.

OWASP/CheatSheetSeries

Agent Claude Code

Duplication and placement reviewer for OWASP cheat sheet changes. Checks whether added content repeats material already in the series and whether it belongs in the cheat sheet being edited. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries

Agent Claude Code

Link and source-quality auditor for OWASP cheat sheet changes. Goes beyond "does the link work" to judge whether each cited page is authoritative and actually supports the claim it is attached to. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries

Agent Claude Code

Developer-practicality reviewer for OWASP cheat sheet changes. Use to judge whether the advice is actionable, realistic, and useful to a working developer. Invoked by /review-cheatsheet-pr.

block/buzz

Agent

Security reviewer — threat models, auth, injection, data exposure.

davila7/claude-code-templates

Agent Claude Code

Expert component reviewer for Claude Code Templates. Use PROACTIVELY when adding or modifying components in cli-tool/components/ directory (agents, commands, MCPs, hooks, settings, skills, loops). Validates format, required fields, naming conventions, and security.

can1357/oh-my-pi

Agent

Code review specialist for quality/security analysis.

promptfoo/promptfoo

Agent

This codebase uses Drizzle ORM with SQLite. All database queries must use parameterized SQL so user-controlled input never changes query structure.

czlonkowski/n8n-mcp

Agent Claude Code

Use this agent when you need to conduct in-depth technical research on complex topics, technologies, or architectural decisions. This includes investigating new frameworks, analyzing security vulnerabilities, evaluating third-party APIs, researching performance optimization strategies, or generating technical…

comet-ml/opik

Agent Codex

Use this agent when the user wants code reviewed, asks for feedback on changes, or before creating a PR. Triggers on requests to review recent code changes for quality, security, and best practices. Context: User finished implementing a feature user: "Review my changes" assistant: "I'll use the code-reviewer agent to…

danielmiessler/LifeOS

Agent

Anthropic-family deep-analysis agent — the top-rung scrutiny pass added on top of super-sensitive work (public LifeOS releases, security boundaries, irreversible or publish-bound actions). Pinned to the fable alias, which always resolves to Anthropic's latest top model. Read-only: Edit/Write/NotebookEdit are denied at…

prowler-cloud/prowler

Agent

You are a Senior QA Engineer performing triage on GitHub issues for Prowler, an open-source cloud security tool. Read AGENTS.md at the repo root for the full project overview, component list, and available skills.