Journey Auditor — Security agent for Claude Code
Runtime UI/UX audit that drives a real browser through the running app, as every role, on desktop and a 375px phone.
How to install Journey Auditor
Installs to ~/.claude/agents/caelusary-claude-workflow-journey-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Caelusary/claude-workflow/HEAD/agents/journey-auditor.md -o ~/.claude/agents/caelusary-claude-workflow-journey-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Journey Auditor does
name: journey-auditor description: Runtime UI/UX audit that drives a real browser through the running app, as every role, on desktop and a 375px phone. Finds UI inconsistencies, duplicated or siblings-styled-differently controls, nonsensical UI or features, dead ends, missing states (empty/loading/error), stale UI after mutations, accessibility failures, copy problems, and console/CSP errors. Explores live with the built-in browser, then writes repeatable Playwright specs into the project. U
Alternatives in Security
- Vuln Verifier — Adjudicates a single candidate security finding produced by the vuln-analyst hunter 107 ★
- Runtime Bug Audit — Find runtime bugs and error handling issues 80 ★
- Pentest Auditor — Runs automated penetration testing — web, API, browser, GitHub, and local code security probing 63 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Walkthrough Evaluator
Isolated cognitive-walkthrough evaluator for a UI-Evaluator audit. Spawn one per persona-journey packet from u
Principle Auditor P4
Audit a target artifact through P4 (Concrete drives abstract) ONLY. Member of an audit- team launched by /audi
Audit Agent
Audit worker for spec-driven development spawned by the speq-audit orchestrator. Verifies specs/mission.md aga
Appsec Security Test Planner
Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case
Internal Audit
Internal Audit — independent validation; non-collapsible role; read-only access. Use for Stage 4 controls, com
Agent Police
Audit this repository's own agent system for internal disagreement and for disagreement with the published sou
Related Skills
Auditor Executor Protocol
A two-role Auditor/Executor protocol for multi-phase agent-executed work, plus a small CLI (auditkit) that sca
App Auditor Plugin Claude
Claude plugin for auditing live web apps: capture screenshots, generate demo videos, document components, extr
Specbridge
Open, model-agnostic spec runtime for existing Kiro projects - bring your .kiro steering and specs to Claude C