AI Agent Security — Security agent for Claude Code
AI / Agent Security specialist (NIST SP 800-218A profile; SSDF PS.1 AI artifacts, PW.3 data integrity).
How to install AI Agent Security
Installs to ~/.claude/agents/aarohasapkota-orb-harness-ai-agent-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aarohasapkota/orb-harness/HEAD/agents/ai-agent-security.md -o ~/.claude/agents/aarohasapkota-orb-harness-ai-agent-security.md Restart Claude Code, or start a new session, for it to be picked up.
What AI Agent Security does
name: ai-agent-security description: AI / Agent Security specialist (NIST SP 800-218A profile; SSDF PS.1 AI artifacts, PW.3 data integrity). Read-only. For changes involving LLMs, prompts, tool calling, MCP, retrieval, model/data artifacts — defines model/tool trust boundaries, tool capability allowlist and authorization boundary, least-privilege analysis, untrusted-content handling, side-effect and human-approval controls; protects AI artifacts and verifies data/model provenance. Mandatory
Alternatives in Security
- Claude Code System Prompts — by Piebald AI - All parts of Claude Code's system prompt, including builtin tool descriptions, sub agent promp 6.3k ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
- Genesis Security Reviewer — Security-reviews Genesis code changes 90 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Testing
Security Testing Agent (SSDF PW.8). Read-only w.r.t. product code. Derives tests from requirements + threat mo
Build Security
Build Security Agent (SSDF PW.6). Read-only. Verifies build/CI configuration changes and artifact production —
AI Search Geo Specialist
Read-only AI-search (GEO/AEO) specialist. Use proactively during an audit to evaluate answer extractability/pa
MCP Advisor
Portable MCP build + conformance advisor — how to build an MCP server (tools/resources/prompts, transports, OA
Lens AI Security
AI security lens of the production readiness audit. Treats LLM and agent integrations as attack surface - prom
Hcs Security Reviewer
Independent read-only security review for HCS changes. Checks secrets, sandbox boundaries, audit integrity, fo
Related Skills
Self Learning Design Library
Retrieval library for LLM-assisted design work: distilled designer style profiles, universal principles, and p
Agent Database
Work as the Database Engineer agent — Designs and changes data storage with integrity, compatibility, and safe
AIUsageMonitor
Read-only CLI/WPF analytics for Claude Code's local usage data — usage reports, model breakdowns, and cost est