Attack Graph Synthesizer — Development agent for Claude Code
Systematically searches for multi-step and cross-contract attack chains by walking the codebase knowledge graph and checking each path against the invariant suite.
How to install Attack Graph Synthesizer
Installs to ~/.claude/agents/calc1f4r-horus-attack-graph-synthesizer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/calc1f4r/Horus/HEAD/.claude/agents/attack-graph-synthesizer.md -o ~/.claude/agents/calc1f4r-horus-attack-graph-synthesizer.md Restart Claude Code, or start a new session, for it to be picked up.
What Attack Graph Synthesizer does
name: attack-graph-synthesizer description: "Systematically searches for multi-step and cross-contract attack chains by walking the codebase knowledge graph and checking each path against the invariant suite. Produces attack-candidates.json for protocol-reasoning to validate. Use after Phase 4 (Discovery) when audit-output/graph/graph.json is available." tools: [Agent, Bash, Edit, Write, Glob, Grep, Read, WebFetch, WebSearch] maxTurns: 80
**Claude Code Agent Conventions**:
- Spawn s
Alternatives in Development
- Correlator — Finding correlation engine 812 ★
- Dashclaw Gate Runner — Runs the DashClaw verification gates (lint, full vitest suite, build, contract checks) and returns ONLY the fa 297 ★
- Chain Executor — Executes delegated chain steps with context isolation 186 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Defihacklabs Indexer
Analyzes executable DeFiHackLabs exploit PoCs and supporting exploit writeups to create or migrate attack-grap
Attack Planner
Delegates to this agent when the user wants to correlate findings from multiple tools or agents, build multi-s
Certora Mutation Testing
Takes a Certora configuration and invariant suite, generates mutation campaigns correctly with certoraMutate a
Attack Ideator
Phase 10 Review Chamber creative attack hypothesis generator that thinks like a hacker, chains low-severity is
Cb Adversary
CoalBoard's falsification lens (adversary, high/nasa rigor) — searches for the one input, case, or sequence wh
Ad Attack Planner
Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enum
Related Skills
Cia
Claude Code / Codex skill: audits a codebase as a Viable System (Stafford Beer VSM). Maps modules onto Systems
Litreview
Launch the scopus-researcher agent for a full autonomous literature review on a given topic. The agent searche
Review AI Agent Surface
Audit the AI and agent attack surface: prompt injection, tool-permission scope, unbounded agent loops, and uns