Security Lens — Security agent for Claude Code
Application security lens for DevBox reviews.
How to install Security Lens
Installs to ~/.claude/agents/ahmadkashif-devbox-security-lens.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Ahmadkashif/devbox/HEAD/agents/security-lens.md -o ~/.claude/agents/ahmadkashif-devbox-security-lens.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Lens does
name: security-lens description: Application security lens for DevBox reviews. Threat-models a plan or diff across its trust boundaries (STRIDE) and checks it against OWASP Top 10:2025, ASVS 5.0 and, for AI features, the OWASP LLM Top 10 - authentication, authorization, input handling, injection, secrets, crypto, data exposure, dependency and supply chain risk, and error handling that fails closed. Returns only verified, exploitable CRITICAL and MAJOR findings. Invoked by devbox:linus or /de
Alternatives in Security
- Security Sast — Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul 31.9k ★
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
- Security Architecture — Boucle implements a defense-in-depth security model to protect against prompt injection attacks and maintain t 61 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cybersecurity Expert
Threat-models code and architecture changes across trust boundaries, authn/authz flows, secrets handling, and
Appsec Engineer
Application Security Engineer (Tier 3): reviews and tests code against OWASP Top 10:2025 / ASVS — authenticati
Threat Modeler
Threat-modeling specialist using STRIDE, PASTA, and LINDDUN. Builds and updates data-flow diagrams, identifies
Pan Hardener
Security audit agent — OWASP Top 10 + STRIDE threat modeling across files changed in a phase. Read-only. Spawn
Appsec AI Security Reviewer
Use for AI/LLM application security review: direct/indirect prompt injection, tool and agent authorization, RA
Afc Appsec Expert
Application Security specialist — remembers security architecture decisions and threat models across sessions
Related Skills
Owasp Security
OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and
Claude Code Audit Gate
Independent audit agent for Claude Code: audits an app built by another agent (OWASP ASVS/Top 10 security, eve
Security Audit Stride
Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c