Security agents

defuse/auditician-temp

Agent Claude Code

File-scoped security auditor; adds ideas to BRAINSTORM.md and creates individual issue files in issues/plausible/.

defuse/auditician-temp

Agent Claude Code

An expert security proof writer to help identify vulnerabilities, informed by (failed) attempts to prove security.

pabpereza/kali-mcp

Agent

Service Enumeration subagent — runs the full protocol-specific playbook against a single discovered port/service. Reads knowledge/protocols/ .md and executes every step.

pabpereza/kali-mcp

Agent

Generic Kali pentest worker — receives a specific mission from the orchestrator and executes it using the MCP toolkit. All workflow knowledge comes from the orchestrator's prompt, not from internal state.

pabpereza/kali-mcp

Agent

Kali Linux ethical hacking assistant — performs authorized security assessments using the MCP toolkit exposed by the Kali container.

heyhuynhgiabuu/pi-task

Agent

PROACTIVE — Use after non-trivial edits for an independent read-only audit of correctness, security, regressions, and maintainability with path:line evidence; not before reviewable code exists.

seed-hypermedia/seed

Agent Claude Code

../../docs/security/auditor.md.

aws-samples/sample-claude-code-agent-team

Agent ✓ vendor

Code review teammate — analyzes implementations for correctness, security, and maintainability. Communicates directly with implementers for clarifications. Writes structured findings to review.md.

solygambas/python-openai-projects

Agent Claude Code

Use this agent to perform a focused security audit of authentication-related code (NextAuth v5 credentials + GitHub, email verification, password reset, and profile update flows). It reports only real, validated issues and writes results to docs/audit-results/AUTHSECURITYREVIEW.md.

solygambas/python-openai-projects

Agent Claude Code

Use this agent when you need to audit a Next.js codebase for security vulnerabilities, performance bottlenecks, code quality issues, or opportunities to refactor code into smaller components. This agent focuses on actual implemented code and does not flag missing features or unimplemented…

navikt/copilot

Agent

Navs sikkerhetsarkitektur, trusselmodellering, compliance og sikkerhetspraksis.

tayontech/SCOPE

Agent

SCOPE audit orchestrator — single entry point for the full audit pipeline. Runs Python SCOPE runtime enumeration, chains attack-path reasoning, verification, defensive controls, post-processing, and dashboard generation. Invoke with /scope:audit .

tayontech/SCOPE

Agent

SOC alert investigation assistant. Guides analysts through CloudTrail-based alert investigation in Splunk — step-by-step guided queries, investigation timelines, and IOC correlation. Invoke with /scope:investigate.

war851/AI-Governance-Architecture

Agent Claude Code

Reviews code changes for quality, security, and adherence to project standards.

Daliagents-com/agentsge-1

Agent

Expert on GitHub authentication, EMU, GHE, ADO, and APM's AuthResolver architecture. Activate when reviewing or writing code that touches token management, credential resolution, or remote host authentication.

cleydson/flutter-claude-code

Agent Claude Code

Use this agent when designing Flutter application architecture, project structure, and design patterns. Specializes in Clean Architecture, feature organization, dependency injection, navigation, and scalable code organization. Examples: Context: User starting new Flutter project user: 'I need to set up a new…

weny911/AI-coding-almighty

Agent Claude Code

Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.

Automattic/wordpress-atmosphere

Agent Claude Code

Defensive first-party security review of the plugin's own code to detect and help fix weaknesses (SSRF, OAuth bypass, XSS, token leakage, DPoP issues) before release. Use when asked to check security, harden the plugin, or review the code for vulnerabilities to fix.

Automattic/wordpress-atmosphere

Agent Claude Code

Check AT Protocol and standard.site spec compliance. Use when asked to verify Lexicon conformance, OAuth flow correctness, or record schema validation.

CDSecurity/cdsecurity-skills

Agent

You have: framework, projectdir, and Bash/Read/Glob/Grep tools. Do NOT read source .sol files. Check project infrastructure only.

sageox/ox

Agent Claude Code

BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (macOS Keychain, Linux Secret Service / kwallet / gnome-keyring, Windows Credential Manager), token caching tradeoffs, env-var hygiene, accidental-commit prevention beyond gitleaks, sub-process credential leakage…

sageox/ox

Agent Claude Code

Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation), Grype (CVE matching), OSV-Scanner (multi-ecosystem advisories), govulncheck (Go reachability), and the modern SBOM/VEX/provenance stack (CycloneDX, SPDX, Sigstore Cosign, SLSA). Use PROACTIVELY when…

sebastienrousseau/pain001

Agent

Security Maintainer operating under PySentinel Zero-Trust Model. Enforces OWASP principles, CVE prevention, supply chain integrity, XXE/XSD validation, and secure development practices with advanced production tollgates.

seungmanchoi/react-native-fsd-agent-template

Agent Claude Code

A code-review and quality-checking agent for projects that use Feature-Sliced Design. It checks architecture rules, type safety, and security, and can run type checks and linting.