Security Analyst — Security agent for Claude Code
Security vulnerability analyst for authentication, authorization, secrets, input validation.
How to install Security Analyst
Installs to ~/.claude/agents/changoo89-claude-pilot-security-analyst.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/changoo89/claude-pilot/HEAD/.claude/agents/security-analyst.md -o ~/.claude/agents/changoo89-claude-pilot-security-analyst.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Analyst does
name: security-analyst description: Security vulnerability analyst for authentication, authorization, secrets, input validation. Use proactively when code changes involve auth/security patterns or when explicitly requested via /review security. Activates for auth/**, security/**, middleware/** paths and keywords: auth, jwt, oauth, session, password, secret, token, encrypt. model: sonnet tools: Read, Grep, Glob, Bash skills: coding-standards teammate_role: security-analyst spawn_prompt: | Y
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
AI Security
Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay
Security Compliance Reviewer
Use this agent when code changes involve authentication, authorization, logging, configuration, or security-se
Security Adversary
Red-team security reviewer for in-flight code diffs. Reads a git diff and produces a ranked critique focused o
Security Agent.Agent
Use when a change touches permissions, authentication, dependencies, configuration, release surfaces, sensitiv
Dnp Security Auditor
🔐 .NET security audit — OWASP Top 10 for APIs, secrets exposure, auth configuration, dependency vulnerabiliti
Harness Security Reviewer
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input
Related Skills
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Hatch3r Auth Scaffold
Scaffold authentication boilerplate for a greenfield API service — OAuth 2.1 authorization-code-with-PKCE flow
Modes
When updating your task boundary, you must explicitly set your current agent mode. Think of this as a way of f
