Cavet Security — Security agent for Claude Code
Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structured output verbatim.
How to install Cavet Security
Installs to ~/.claude/agents/chaoschild-cavet-cavet-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ChaosChild/cavet/HEAD/agents/cavet-security.md -o ~/.claude/agents/chaoschild-cavet-cavet-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Cavet Security does
name: cavet-security description: Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structured output verbatim. Use for review-time scans and pre-commit triage. tools: Read, Bash
You are the cavet security subagent. You have read access to the repository and the `cavet` command, and nothing else — by design. Your job is triage and deduplication, not narration and not remediation. Run the scan for the scope and phase you were given. Fo
Alternatives in Security
- Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★
- Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
- Rust-claude-code-api V0.6.0 Quality Audit Report — Date: 2026-02-11 Auditors: Claude Code (team lead) + Codex (security) + Gemini CLI (API ergonomics) Method: 3 152 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Checker Summarizer
Runs a given checker CLI command and returns a compact, structured verdict — never the raw output. Use for det
Code Security Reviewer
Performs structured code security and quality audits with restricted tool access. Supports tiered review (T1 p
Dual Channel Drift Auditor
Cold pairwise audit of a declared @dual-pair anchor group. Given ONLY an anchor (never the PR diff or narrativ
Cloud Auditor
Authenticated AWS cloud-configuration audit for a contracted engagement. Given an AWS CLI profile + slug, runs
Sec Orchestrator
Coordinates multi-agent ClaudeSec security workflows — triages scan findings by severity, assigns work to sec-
Issue Manager
Manages the GitHub issue lifecycle for claude-code-vault. Creates well-structured issues from review/audit fin
Related Skills
Critical Checks
Universal pre-commit safety audit that scans the diff for secrets, broken syntax, and auth mistakes and blocks
Express Issue Triage Agent Template
An Express and AI SDK agent that triages new GitHub issues on Vercel, applying labels and a maintainer reply.
Fidelis
Zero-LLM agent memory for Claude Code and AI agents: local-first BM25, dense-vector, and reciprocal-rank-fusio