Security agents

entireio/cli

Agent Claude Code

Code review agent - critically reviews changes for quality, security, and correctness.

Awarexone/Agentic-Bug-Hunter

Agent

Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for approval at each step. Configurable checkpoints (--paranoid, --normal, --yolo). Uses scopechecker.py for deterministic scope safety on every outbound request. Logs all requests to audit.jsonl.…

Awarexone/Agentic-Bug-Hunter

Agent

Autonomous credential-attack pipeline runner. Chains /wordlist-gen + /osint-employees + /breach-check (data-prep stages, runs without prompts) then HARD STOPS before /spray (live attack stage requires human go/no-go). Designed so the user only types the target once instead of orchestrating four separate commands.…

Awarexone/Agentic-Bug-Hunter

Agent

Fast meme coin and token security auditor. Checks 8 token-specific bug classes (hidden mint, honeypot, fee manipulation, LP lock bypass, bonding curve exploits, authority retention, fake renounce, sandwich/MEV amplification). Runs tokenscanner.py for automated red flag detection. Covers EVM (Solidity) and Solana…

claraverse-space/ClaraVerse

Agent

Code review specialist for quality and security analysis.

gadievron/raptor

Agent Claude Code

Use this agent when the user needs to perform offensive security operations, security testing, or vulnerability research tasks. This includes:\n\n \nContext: User wants to test a web application for security vulnerabilities.\nuser: "I need to scan this web application at https://example.com for common…

kiali/kiali

Agent

Kiali's authentication system lives in handlers/authentication/. At startup a single AuthController is instantiated based on the auth.strategy configuration field. The controller drives the full session lifecycle: login, per-request validation, and logout.

SenteLabsAI/OpenExecutive

Agent Claude Code

Hostile security reviewer. Use after code changes to adversarially audit the staged git diff for injection, auth bypass, hardcoded secrets, race conditions, and information leakage. Reports severity and a concrete exploit per finding.

AutoMaker-Org/automaker

Agent Claude Code

Use this agent to implement, fix, and build code solutions based on AGENT DEEPDIVE's detailed analysis. AGENT DEEPCODE receives findings and recommendations from AGENT DEEPDIVE—who thoroughly investigates bugs, performance issues, security vulnerabilities, and architectural concerns—and is responsible for carrying out…

AutoMaker-Org/automaker

Agent Claude Code

Use this agent to investigate, analyze, and uncover root causes for bugs, performance issues, security concerns, and architectural problems. AGENT DEEPDIVE performs deep dives into codebases, reviews files, traces behavior, surfaces vulnerabilities or inefficiencies, and provides detailed findings. Typical workflow…

Shelf-nu/shelf.nu

Agent Claude Code

Headless variant of shelf-security-reviewer for the pre-commit hook. Receives the staged diff inline (the wrapper script pre-computes it). Tools restricted to Skill only — no Bash, no WebFetch, no Agent — so prompt injection in the diff cannot exfiltrate. Outputs a strict JSON envelope for safe parsing. Do NOT invoke…

Shelf-nu/shelf.nu

Agent Claude Code

Security-focused reviewer for Shelf PRs and diffs. Use proactively whenever the user asks to review a pull request, audit a branch, or assess the security impact of a change. Always invokes the security-review, oauth-oidc-misconfiguration, supabase, and two-factor-authentication-best-practices skills, and layers…

levy-street/world-of-claudecraft

Agent Claude Code

Privacy and security reviewer for World of ClaudeCraft code changes. Use before committing to verify server authority / anti-cheat, dev-command gating, secret handling, auth, parameterized SQL, input validation, moderation/admin gating, and account-data privacy from CLAUDE.md. Read-only - analyzes code but never…

tractorjuice/arc-kit

Agent

Use this agent when the user needs AWS-specific technology research using the AWS Knowledge MCP server to match project requirements to AWS services, architecture patterns, Well-Architected guidance, and Security Hub controls. Examples: Context: User has a project with requirements and wants AWS service…

tractorjuice/arc-kit

Agent

Use this agent when the user needs Azure-specific technology research using the Microsoft Learn MCP server to match project requirements to Azure services, architecture patterns, Well-Architected guidance, and Security Benchmark controls. Examples: Context: User has a project with requirements and wants Azure service…

0xSteph/pentest-ai-agents

Agent

Delegates to this agent when the user asks about malware analysis, reverse engineering, binary analysis, disassembly, debugging, sandbox analysis, static analysis, dynamic analysis, or suspicious file triage.

0xSteph/pentest-ai-agents

Agent

Delegates to this agent when the user asks about OSINT, reconnaissance, information gathering, target profiling, email harvesting, subdomain enumeration, social media recon, breach data, open source intelligence, or building a target dossier for authorized engagements.

0xSteph/pentest-ai-agents

Agent

Delegates to this agent when the user asks about threat modeling, attack surface analysis, STRIDE, DREAD, attack trees, data flow diagrams, trust boundaries, or security architecture review.

iannuttall/claude-agents

Agent

Use this agent when you need to perform a comprehensive security audit of a codebase, identify vulnerabilities, and generate a detailed security report with actionable remediation steps. This includes reviewing authentication mechanisms, input validation, data protection, API security, dependencies, and infrastructure…

glittercowboy/taches-cc-resources

Agent

Expert slash command auditor for Claude Code slash commands. Use when auditing, reviewing, or evaluating slash command .md files for best practices compliance. MUST BE USED when user asks to audit a slash command.

WorldFlowAI/everything-claude-code

Agent

Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.

xu-xiang/everything-claude-code-zh

Agent

A code-review agent that examines recent changes and checks them for likely bugs, security problems, and quality issues.

silvertakana/worldwideview

Agent Codex

Use proactively before merging changes that touch authentication, authorization, plugin execution, API routes, JWT handling, or the marketplace install bridge. Read-only security audit focused on the WWV attack surface. Triggers on "security review", "check for vulnerabilities", "audit the auth flow", "review before…

AutoForgeAI/autoforge

Agent Claude Code

Use this agent when you need a thorough code review of recently written code, when you want to ensure code quality meets the highest standards, when checking for technical debt, security vulnerabilities, or performance issues, or when you need to run quality checks like linting and type checking. Examples:\n\n…