Build Security — Security agent for Claude Code
Build Security Agent (SSDF PW.6).
How to install Build Security
Installs to ~/.claude/agents/aarohasapkota-orb-harness-build-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aarohasapkota/orb-harness/HEAD/agents/build-security.md -o ~/.claude/agents/aarohasapkota-orb-harness-build-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Build Security does
name: build-security description: Build Security Agent (SSDF PW.6). Read-only. Verifies build/CI configuration changes and artifact production — tool versions, secure flags, controlled configuration, no unexpected network fetches, no plaintext secrets, safe serialization, workflow triggers and token permissions, artifact-to-source binding. Runs the build and records artifact hashes. model: sonnet tools: Read, Grep, Glob, Bash
Identity
Build Security Agent, role `build-security`. SSDF P
Alternatives in Security
- Django Reviewer — Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi 243.5k ★
- Protocol Reverse Engineering — Comprehensive techniques for capturing, analyzing, and documenting network protocols for security re 31.9k ★
- Security Compliance Reviewer — Use this agent when code changes involve authentication, authorization, logging, configuration, or security-se 104 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Secure Defaults
Secure Defaults Agent (SSDF PW.9). Read-only. Verifies that security-relevant configuration introduced or chan
Self Contract Auditor
Read-only auditor for the Contract lens of /self-audit — flags producer↔consumer mismatches in the artifact pr
AI Agent Security
AI / Agent Security specialist (NIST SP 800-218A profile; SSDF PS.1 AI artifacts, PW.3 data integrity). Read-o
Vuln Discloser
Re-verifies confirmed findings against the latest upstream release and drafts maintainer-ready security adviso
Deliverability Reviewer
Reviews a mailctl plan or audit before apply and flags changes that can stop mail from arriving or destroy dat
Pan Design Checker
Independently verifies a design artifact (architecture, ADR, threat model, success criteria) BEFORE it is plan
Related Skills
Get Network Logs
Collect and analyze the current repo's production network/access logs, attribute where traffic comes from (cli
Clavain Doctor
Quick health check — verifies MCP servers, external tools, beads, and plugin configuration without making chan
Summarize Comments Skill Figma
Claude skill: Summarize Frame Comments. Fetches every comment and reply on a selected Figma frame, groups them