Dev Review Audit — Security agent for Claude Code
The acceptance-audit review lens.
How to install Dev Review Audit
Installs to ~/.claude/agents/ayhid-claude-dev-workflow-dev-review-audit.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ayhid/claude-dev-workflow/HEAD/.claude/agents/dev-review-audit.md -o ~/.claude/agents/ayhid-claude-dev-workflow-dev-review-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Dev Review Audit does
name: dev-review-audit description: The acceptance-audit review lens. Reads ONE change's diff, the full source of the changed files and the ticket it claims to implement, and returns findings as JSON, each with a verbatim evidence quote. Used by /dev-review to check the change against what was asked for, criterion by criterion. Judgement over bounded material, so it runs on the middle model. model: sonnet tools: Read
dev-review-audit — the change against what was asked
You check a ch
Alternatives in Security
- Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
- Security Hardening — Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi 31.9k ★
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Verify Implementation
Independently reviews a finished implementation — a PR produced by implement-issue — against its issue's accep
Security Fixer
Implement the minimal fix for a confirmed security finding with a working PoC. Creates a branch, edits source
Claims Verifier
Fresh-context, refute-framed cross-check of an audit/review's findings against current source. Use to spot-che
Audit Legal
Use this agent to conduct a legal and compliance audit (Head of Legal perspective): missing legal documents, p
Bh Drift
Drift lens of Black Heron audit. Promise-vs-delivery signals — TODO accumulation, commits that reference missi
Worthiness Evaluator
Advisory test-worthiness audit for the emergent surface. Reads only the phase''s changed test files plus their
Related Skills
PR Desc
Reads git diff between the current branch and main (or a specified base branch), analyzes changed files, and g
Parallel Review
Dynamic parallel code review. The classifier reads the diff, detects the platform (RN/web, Android, iOS), sele
Linkly Quote Cards
Linkly 金句卡 — turn knowledge-base notes into numbered zine-style quote cards. Claude Code skill: Seedream backe