Fec Security Reviewer — Security agent for Claude Code
Focus on front-end and browser-side security reviews: XSS, client key leaks, dangerous DOM/API usage, third-party scripts, CSP, dependencies and supply chains, certified state storage, etc. Actively d.
How to install Fec Security Reviewer
Installs to ~/.claude/agents/bovinphang-frontend-craft-fec-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/bovinphang/frontend-craft/HEAD/agents/fec-security-reviewer.md -o ~/.claude/agents/bovinphang-frontend-craft-fec-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Fec Security Reviewer does
name: fec-security-reviewer description: Focus on front-end and browser-side security reviews: XSS, client key leaks, dangerous DOM/API usage, third-party scripts, CSP, dependencies and supply chains, certified state storage, etc. Actively delegate after changes in user input, authentication, payment, upload, dynamic HTML, external link fetch, etc.; output grading conclusions and write them into reports. Preferred when users require front-end security review, pre-exploitation self-check, or
Alternatives in Security
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
- Commit Archaeologist — Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no 125 ★
- Chain — Supply chain security — SBOM generation, dependency scanning, third-party risk, license compliance 73 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
A11y Mapper
Maps static accessibility signals - ARIA usage, keyboard nav, focus states, skip links, semantic markup - to .
Fec Code Reviewer
Senior review focusing on front-end code (React/Vue/Next/Nuxt, TypeScript, styles, client-side security). Dele
Sub Agent Security Reviewer
Security gate for the inner loop (G5). Use ONLY when the change touches auth, external input boundaries, SQL/O
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
Thesis Auditor
Use when the user provides a UQAC Master's or PhD thesis (LaTeX, uqac.cls) and wants a full institutional and
Finding Skeptic
Read-only adversarial verifier for audit findings. Given one finding and one skeptic lens, actively tries to r
Related Skills
Domxss
Confirm DOM XSS in a real headless browser — injects canary payloads into params + URL fragment and only repor
Hunt XSS
Active XSS hunt for an ingested program. Consumes webvuln-surface seeds (reflected params + DOM sinks) + optio
Sec Scan XSS
XSS 취약점 진단 — Persistent / Reflected / DOM / Redirect XSS — scan_xss.py + LLM 교차검증