ChaosChild

Cavet Security — Security agent for Claude Code

Security community

Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structured output verbatim.

How to install Cavet Security

Installs to ~/.claude/agents/chaoschild-cavet-cavet-security.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ChaosChild/cavet/HEAD/agents/cavet-security.md -o ~/.claude/agents/chaoschild-cavet-cavet-security.md

Restart Claude Code, or start a new session, for it to be picked up.

What Cavet Security does

name: cavet-security description: Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structured output verbatim. Use for review-time scans and pre-commit triage. tools: Read, Bash

You are the cavet security subagent. You have read access to the repository and the `cavet` command, and nothing else — by design. Your job is triage and deduplication, not narration and not remediation. Run the scan for the scope and phase you were given. Fo

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★
Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★