Security agents

4,663 tagged Security, measured the same way as everything else here.

Browse within: ai-security 90cybersecurity 77Autonomous Agents 74bug-bounty 73ai-security-tool 64appsec 63agentic-coding 57Multi-Agent 51offensive-security 51multi-agent-systems 50ctf 47claude-code-skills 44compliance 40agentic 39

security-reviewer

49

cfrs2005/claude-init

Agent Claude Code

A security-review agent that looks for common weaknesses in web applications and code, including exposed secrets, unsafe input handling, broken access controls, and vulnerable dependencies. It uses security checks and tools described in its instructions.

1.4k +1 5mo ago A 60 tokens original MIT

hesreallyhim/a-list-of-claude-code-agents

Agent

Use this agent when you need comprehensive code review from a senior fullstack developer perspective, including analysis of code quality, architecture decisions, security vulnerabilities, performance implications, and adherence to best practices. Examples: Context: User has just implemented a new authentication system…

1.3k 9mo ago A 229 tokens

code-reviewer

51

piomin/claude-ai-spring-boot

Agent Claude Code

Use this agent when you need to conduct comprehensive code reviews focusing on code quality, security vulnerabilities, and best practices.

1.3k 4mo ago A 27 tokens original Apache-2.0

code-reviewer

52

grafbase/grafbase

Agent Claude Code

Expert code review specialist. Proactively reviews code for quality, security, and maintainability. Use immediately after writing or modifying code.

1.2k +1 2mo ago A 30 tokens original MPL-2.0

security

53

open-gsd/gsd-pi

Agent

OWASP security audit, dependency risks, and secrets detection.

1.2k 2d ago A 13 tokens original MIT

FabricAdmin

55

microsoft/skills-for-fabric

Agent ✓ vendor

Manage Microsoft Fabric operational excellence across capacity planning, governance, security, cost optimization, and observability. Use when the request involves workspace administration, capacity monitoring, access control, compliance policies, cross-workload operational concerns, or workspace documentation and…

1.1k +33 5d ago A 63 tokens original MIT

agentless-scanning

56

DataDog/pup

Agent ✓ vendor

Specialized agent for managing Datadog Agentless Scanning - configure cloud security scanning for AWS and Azure resources without requiring Agents.

999 5d ago A 25 tokens original Apache-2.0

01-sql-injection

58

classmethod/tsumiki

Agent

A code-review agent that checks files for SQL injection, a flaw where user input changes a database query. SQL is the language commonly used to read and change database data.

974 26d ago A 25 tokens original MIT

classmethod/tsumiki

Agent

A code-review agent that checks files for OS command injection, a security flaw where outside input can make a program run unintended operating-system commands. It uses rules and guidance from Japan’s IPA web-security documents.

974 26d ago A 28 tokens original MIT

05-xss

60

classmethod/tsumiki

Agent

A specialized code-review agent that checks for cross-site scripting, a web vulnerability where untrusted content is executed as code in another user’s browser. It follows Japanese IPA web-security guidance.

974 26d ago A 30 tokens original MIT

agent-reviewer

61

guanyang/open-agent-hub

Agent

Senior Technical Lead and Security Auditor specializing in code quality, correctness, and security audits.

958 2d ago A 21 tokens original MIT

reviewer

62

kdcokenny/ocx

Agent

Expert code reviewer for security, performance, and philosophy compliance.

934 +4 14d ago A 11 tokens original MIT

backup

63

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed fastcmp toolbox for an enterprise backup platform (Veeam/Commvault/Rubrik/Cohesity/Veritas/Nakivo/Bacula/Restic/Borg: credential stores, repositories, restore-as-exfiltration).

886 +8 4d ago A 0 tokens GPL-3.0

drupal

64

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Drupal applications (core, contrib modules, JSON:API, REST, Entity/Field system, Render API, Twig, Views, Drupal Commerce, roles/permissions).

886 +8 4d ago A 49 tokens GPL-3.0

moodle

65

ASCIT31/Dark-Moon

Agent

Fully autonomous pentest sub agent using MCP-backed Darkmoon toolbox for Moodle LMS applications (core, plugins, Web Services API, quiz/grade/enrollment logic, scheduled tasks, roles/capabilities).

886 +8 4d ago A 43 tokens GPL-3.0

report-writer

66

H-mmer/pentest-agents

Agent Claude Code

Security report generation agent. Use for compiling findings into formal penetration test reports, executive summaries, technical write-ups, and bug bounty submissions. Provide the findings directory or list of vulnerabilities to document.

815 +2 2mo ago A 42 tokens

sast-danger-mapper

67

H-mmer/pentest-agents

Agent Claude Code

Maps dangerous operations in a source file: memory ops, type casts, arithmetic near trust boundaries, free/dealloc patterns. Pattern matching task — list what you see, don't speculate. Use via /sast command.

815 +2 2mo ago A 49 tokens

ssti-hunter

68

H-mmer/pentest-agents

Agent Claude Code

Server-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin template, or user-customizable template surface. Systematic blocklist mapper + CVE bypass runner + runtime-vs-parse…

815 +2 2mo ago A 83 tokens

security-agent

69

alinaqi/maggy

Agent

Performs security analysis on completed features - OWASP scanning, secrets detection, dependency audit. Blocks on Critical/High.

705 +1 15d ago A 27 tokens original MIT

reviewer

70

AVIDS2/memorix

Agent

Code review specialist for quality and security analysis.

705 3d ago A 11 tokens copy · 100% Apache-2.0

ananddtyagi/cc-marketplace

Agent

Universal quality control orchestrator and final authority for any software development project. Dynamically discovers and coordinates with available sub-agents, performs comprehensive multi-dimensional quality assessment, security validation, and deployment readiness verification. Adapts to any project type…

688 +1 7mo ago A 0 tokens