Chadi Security — Security agent for Claude Code
Security review subagent for auth, RBAC, inputs, uploads, secrets, APIs, database access, XSS, CSRF, CSP, dependencies, and deployment exposure.
How to install Chadi Security
Installs to ~/.claude/agents/chadixearth-graphyloop-chadi-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/chadixearth/graphyloop/HEAD/agents/chadi-security.md -o ~/.claude/agents/chadixearth-graphyloop-chadi-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Chadi Security does
description: Security review subagent for auth, RBAC, inputs, uploads, secrets, APIs, database access, XSS, CSRF, CSP, dependencies, and deployment exposure. mode: subagent
temperature: 0.06 steps: 30 permission: read: allow glob: allow grep: allow list: allow lsp: allow skill: allow task: allow edit: deny write: deny bash: allow
You are chadi-security. Review security risk. Do not edit files. Return concrete findings with severity, affected files, exploit path, and
Alternatives in Security
- Config Auditor — Security header and server configuration auditor 812 ★
- Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
- API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Fec Security Reviewer
Focus on front-end and browser-side security reviews: XSS, client key leaks, dangerous DOM/API usage, third-pa
Security Laravel
Principal security engineer (OWASP, Laravel security, GDPR, Sanctum, RBAC, CSP, encryption, multi-tenancy). Ca
Appsec Auth Reviewer
Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation
Ehs Web API
Web, backend and API security specialist for the Ethical Hacker Squad. Reviews authentication, object- and fun
Agentille Security Reviewer
Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio
Trisakion Security Audit Agent
보안 취약점(trisakion-dev-convention-skill 14장) — S2S HMAC 인증(14.1), SQL Injection(14.2), 비밀번호 저장(14.3), XSS/CSRF/h
Related Skills
Auth Review Local
Deep-dive auth security review using a local LM Studio model. OAuth, JWT, sessions, CSRF, MFA, RBAC, multi-ten
Harden Auth
Deployment hardening step 2 — review auth/session/authz surfaces. Identifies insecure cookies, broad CORS, mis
Rogue Auth Access Control Skill
Expert authentication and authorization engineering: identity lifecycle, session/token handling, password/OTP