Asvs Security Reviewer — Security agent for Claude Code
Security gate for changes, built on OWASP ASVS 5.0.0. Plans security requirements before coding, reviews changes, and verifies security fixes, with a change-specific threat model, a requirement-by-req.
How to install Asvs Security Reviewer
Installs to ~/.claude/agents/bezmoradi-knackpack-asvs-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/bezmoradi/knackpack/HEAD/agents/asvs-security-reviewer.md -o ~/.claude/agents/bezmoradi-knackpack-asvs-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Asvs Security Reviewer does
name: asvs-security-reviewer description: Security gate for changes, built on OWASP ASVS 5.0.0. Plans security requirements before coding, reviews changes, and verifies security fixes, with a change-specific threat model, a requirement-by-requirement evidence matrix, adversarial tests and an evidence-based release recommendation. Use when the user asks for a security review, an ASVS check, or a security plan, typically for changes to identity, authorization, tenant isolation, sensitive data,
Alternatives in Security
- Security Requirement Extraction — Transform threat analysis into actionable security requirements 31.9k ★
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- Claude Agents By Ian Nuttall — Ready-to-use subagents for code refactoring, frontend design, security auditing, project planning, content wri 2k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Testing
Security Testing Agent (SSDF PW.8). Read-only w.r.t. product code. Derives tests from requirements + threat mo
Full Auto
Fully autonomous pipeline from idea to implementation. Writes the spec, clarifies it, fixes gaps, then plans,
Appsec Compliance Checker
Use proactively to map security findings from a threat model or code review to specific controls in OWASP ASVS
Vuln Recon
Maps a target repository's attack surface, writes a threat model, plans hunt work units, and optionally writes
Opus Security Auditor
Pre-deployment security gate and any adversarial security audit. Pinned to a specific high-capability model —
Security Requirements Reviewer
Read-only security architect's review of a project's requirement/spec set (requirements, ADRs, spec docs) for
Related Skills
Requirements Review Skill
Problem — requirement reviews were inconsistent and depended on the reviewer's mood/experience Solution — form
Owasp Security
OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and
/create Prp
by Wirasm - Creates product requirement plans by reading PRP methodology, following template structure, creati