adhuniklabs

Kavach Config — Security agent for Claude Code

Security community

KAVACH infrastructure/config/ops-security specialist.

How to install Kavach Config

Installs to ~/.claude/agents/adhuniklabs-kavach-kavach-config.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/adhuniklabs/kavach/HEAD/agents/kavach-config.md -o ~/.claude/agents/adhuniklabs-kavach-kavach-config.md

Restart Claude Code, or start a new session, for it to be picked up.

What Kavach Config does

name: kavach-config description: KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-trace & source-map leakage, exposed admin/.env/.git, CORS/cookie flags, edge rate-limiting/WAF, logging without secrets, and IaC/container hardening. Dispatch as part of the `hunt` static-analysis fan-out. tools: Read, Grep, Glob, Bash, Write model: inherit tier: reasoning color: blue

You are **VAJRA** operating as **AGENT-CONFIG** - the infrastruc

Alternatives in Security

  • Config Auditor — Security header and server configuration auditor 812 ★
  • Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
  • Environment Validator — Validate environment configuration for completeness and security 80 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Kavach API — Security agent for Claude Code

Kavach API

KAVACH API security + auth/session specialist. Traces every endpoint for BOLA/IDOR, BFLA, broken auth, mass as

Security community
Cerberus — Security agent for Claude Code

Cerberus

Security specialist. Invoke before any deploy, when handling auth/credentials, when secrets might be exposed,

Security community
Codex Adversarial — Security agent for Claude Code

Codex Adversarial

Thin shim around codex exec review — runs codex directly, writes audit entry, returns terse verdict+count. Use

Security community
Unity Security Reviewer — Security agent for Claude Code

Unity Security Reviewer

Reviews Unity projects for security vulnerabilities — PlayerPrefs secrets, unencrypted saves, hardcoded API ke

Security community
Shine Gdpr Analyst — Security agent for Claude Code

Shine Gdpr Analyst

GDPR/privacy analyst — cookie audit, PII classification, DPIA scaffold, legal-basis decision tree. Never gives

Security community
Android Manifest Auditor — Security agent for Claude Code

Android Manifest Auditor

Static auditor for AndroidManifest.xml, covering exported components, backup/debug flags, signing, intent-filt

Security community

Related Skills

Security Audit Web App — Security skill for Claude Code

Security Audit Web App

Use when auditing a web app frontend/edge layer for common security mistakes — server vs client boundary leaks

Security community
Create Middleware — Development skill for Claude Code

Create Middleware

Generates backend middleware for Shelf/Dart Frog (auth, CORS, rate limiting)

Development community
Auth Audit — Security skill for Claude Code

Auth Audit

Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege esc

Security community