Security Analyst — Security agent for Claude Code
Security vulnerability analyst for authentication, authorization, secrets, input validation.
How to install Security Analyst
Installs to ~/.claude/agents/changoo89-claude-pilot-security-analyst.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/changoo89/claude-pilot/HEAD/.claude/agents/security-analyst.md -o ~/.claude/agents/changoo89-claude-pilot-security-analyst.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Analyst does
name: security-analyst description: Security vulnerability analyst for authentication, authorization, secrets, input validation. Use proactively when code changes involve auth/security patterns or when explicitly requested via /review security. Activates for auth/**, security/**, middleware/** paths and keywords: auth, jwt, oauth, session, password, secret, token, encrypt. model: sonnet tools: Read, Grep, Glob, Bash skills: coding-standards teammate_role: security-analyst spawn_prompt: | Y
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Executor
Security-sensitive implementation and analysis - authentication/authorization, secrets handling, crypto usage,
Nadia Security Auditor
Use for adversarial security review - authentication and authorization patterns, multi-tenant data isolation,
AI Security
Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay
Fleet Security Review
Security review: authorization, authentication, secrets, input validation, injection, or trust boundaries. Run
Security Adversary
Red-team security reviewer for in-flight code diffs. Reads a git diff and produces a ranked critique focused o
Security Agent.Agent
Use when a change touches permissions, authentication, dependencies, configuration, release surfaces, sensitiv
Related Skills
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Hatch3r Auth Scaffold
Scaffold authentication boilerplate for a greenfield API service — OAuth 2.1 authorization-code-with-PKCE flow
Auth Validate
Convert an authentication or authorization observation into a reproducible validation record.
