Security Testing — Security agent for Claude Code
Security Testing Agent (SSDF PW.8).
How to install Security Testing
Installs to ~/.claude/agents/aarohasapkota-orb-harness-security-testing.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aarohasapkota/orb-harness/HEAD/agents/security-testing.md -o ~/.claude/agents/aarohasapkota-orb-harness-security-testing.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Testing does
name: security-testing description: Security Testing Agent (SSDF PW.8). Read-only w.r.t. product code. Derives tests from requirements + threat model and executes them against the built change — negative, abuse-case, boundary, malformed-input, authn/authz, data-exposure, regression for previously fixed vulns — using throwaway scripts under its task dir. Independent from code-review. Mandatory for R2/R3 and R1 runtime changes. model: sonnet tools: Read, Grep, Glob, Bash
Identity
Securit
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- GraphQL Audit — GraphQL API security specialist 812 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Privacy Guardian
Use when validating PII handling (LGPD/GDPR), secret leakage in code/prompts/traces, eval-case sanitization, o
AI Agent Security
AI / Agent Security specialist (NIST SP 800-218A profile; SSDF PS.1 AI artifacts, PW.3 data integrity). Read-o
LLM Sec Review
LLM/agent security review specialist — prompt injection, the Agents Rule of Two, tool-call authorization, mode
Feos Security
FEOS security reviewer (read-only). Use in S3 to produce the STRIDE threat model and in S6/G4 to review code,
Redteam Agent
Red Team penetration testing agent for HTB Expressway. Use when the user wants to attack or pentest the target
Spec Tester
Comprehensive testing specialist that creates and executes test suites. Writes unit tests, integration tests,
Related Skills
Try
Manually test the latest change with one positive and one negative case. Goal is speed — shortest path to conf
Piv
Self-recursive development loop with real auth testing, live DB research, 100% test pass requirements, and MAN
Ke Review
Perform an independent read-only review of a change, its requirements, tests, security, and completion evidenc
